CVE-2023-26284: IBM Mq Certified Container

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417.

Affected products

• IBM Mq Certified Container: from 9.3.0.1, before 9.3.0.4 (fixed in 9.3.0.4); from 9.3.1.0, before 9.3.2.0 (fixed in 9.3.2.0)

Published 2023-03-15. Last modified 2026-06-17.