CVE 6.2 MEDIUM

IBM MQ Operator information disclosure_CVE-2025-33013

6.2 / 10
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clearing of heap memory before release.

Basic Information

ID CVE-2025-33013
Source ibm
Published Jul 24, 2025 at 14:55
Modified Jul 24, 2025 at 15:03

Affected Product

Vendor IBM
Product MQ Operator
Version 2.0.0 LTS
Affected Versions IBM MQ Operator 2.0.0 LTS
IBM MQ Operator 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1, 3.6.0 CD
IBM MQ Operator 3.2.0 SC2

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.