CVE-2025-33013 — IBM MQ Operator information disclosure

CVE-2025-33013

IBM MQ Operator information disclosure PUBLISHED

Description (CNA)

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clearing of heap memory before release.

Affected (CNA)

Vendor / product	Versions
IBM / MQ Operator	affected 2.0.0 LTS through 2.0.29 LTS
IBM / MQ Operator	affected 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1, 3.6.0 CD
IBM / MQ Operator	affected 3.2.0 SC2 through 3.2.13 SC2

CWE

CWE-244

References

https://www.ibm.com/support/pages/node/7240431

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.