CVE-2024-39742
HIGHDescription
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-Force ID: 297169.
Is your site exposed to CVE-2024-39742?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
| ibm | mq_operator |
References
Frequently Asked Questions
What is CVE-2024-39742? +
How severe is CVE-2024-39742? +
What products are affected by CVE-2024-39742? +
How do I check if I'm vulnerable to CVE-2024-39742? +
Related Vulnerabilities
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d …
Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions …
A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with …
@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the …
view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3.0.0 to 4.9.0, …
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local …