CVE-2025-36005 | BDVDB-2026-287322 Detail

Description#

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Internet Pass-Thru could allow a malicious user to obtain sensitive information from another TLS session connection by the proxy to the same hostname and port due to improper certificate validation.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-07-24Record published in the CVE List.
2. Version 22025-08-17Most recent update recorded in the CVE List.