PT-2025-30673 · Ibm · Ibm Mq Operator

Published 2025-07-24 · Updated 2025-07-24 · CVE-2025-33013

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM MQ Operator versions 2.0.0 through 2.0.29 IBM MQ Operator versions 3.0.0 through 3.1.3 IBM MQ Operator versions 3.2.0 through 3.2.13 IBM MQ Operator versions 3.3.0 IBM MQ Operator versions 3.4.0 through 3.4.1 IBM MQ Operator versions 3.5.0 through 3.5.1 IBM MQ Operator version 3.6.0

Description The software could disclose sensitive information to a local user due to improper clearing of heap memory before release.

Recommendations IBM MQ Operator versions prior to 2.0.29 should be updated. IBM MQ Operator versions 3.0.0 through 3.1.3 should be updated. IBM MQ Operator versions 3.2.0 through 3.2.13 should be updated. IBM MQ Operator version 3.3.0 should be updated. IBM MQ Operator versions 3.4.0 through 3.4.1 should be updated. IBM MQ Operator versions 3.5.0 through 3.5.1 should be updated. IBM MQ Operator version 3.6.0 should be updated.

Fix

Weakness Enumeration

CWE-244

CWE-212

Related Identifiers

CVE-2025-33013

Affected Products

Ibm Mq Operator

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-33013 · Security Note
• https://osv.dev/vulnerability/CVE-2025-33013 · Vendor Advisory
• https://twitter.com/CVEnew/status/1948402126738039185 · Twitter Post
• https://ibm.com/support/pages/node/7240431 · Vendor Advisory, Patch