Vulnerability Description
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other than the intended key which could disclose sensitive information or allow the attacker to perform unauthorized actions.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Mq Operator | >= 2.0.0, <= 2.0.29 |
| Ibm | Supplied Mq Advanced Container Images | 9.2.0.1 |
Related Weaknesses (CWE)
References
- https://www.ibm.com/support/pages/node/7236608Vendor Advisory
FAQ
What is CVE-2025-36041?
CVE-2025-36041 is a vulnerability with a CVSS score of 4.7 (MEDIUM). IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR coul...
How severe is CVE-2025-36041?
CVE-2025-36041 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-36041?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Mq Operator, Ibm Supplied Mq Advanced Container Images.