Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-4822

IBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allow local users to discover preconfigured cleartext passwords via an unspecified trace operation.

Published

2014-10-19T01:55:14.013

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 1.9 (LOW)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

3.4

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-255
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm websphere_mq 8.0.0.0 Yes
Application ibm websphere_mq_explorer 7.5.0.0 Yes
Application ibm websphere_mq_explorer 7.5.0.1 Yes
Application ibm websphere_mq_explorer 7.5.0.2 Yes
Application ibm websphere_mq_explorer 7.5.0.3 Yes
Application ibm websphere_mq_explorer 7.5.0.4 Yes
Application ibm websphere_mq_explorer 8.0.0.0 Yes
Application ibm websphere_mq_explorer 8.0.0.1 Yes
References