CVE-2025-33013

Published Jul 24, 2025

Last updated 8 months ago

Overview

Description
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clearing of heap memory before release.
Source
psirt@us.ibm.com
NVD status
Analyzed
Products
mq_operator, supplied_mq_advanced_container_images

Risk scores

CVSS 3.1

Type
Primary
Base score
5.5
Impact score
3.6
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

Weaknesses

psirt@us.ibm.com
CWE-244
nvd@nist.gov
CWE-212

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.