IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID: 250398.
2023-05-19T15:15:08.750
2024-11-21T07:55:16.053
Modified
CVSSv3.1: 6.2 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | mq | 8.0.0.0 | Yes |
| Application | ibm | mq | 9.0.0.0 | Yes |
| Application | ibm | mq | 9.1.0 | Yes |
| Application | ibm | mq | 9.1.0.0 | Yes |
| Operating System | hp | hp-ux | - | No |
| Operating System | ibm | aix | - | No |
| Operating System | ibm | i | - | No |
| Operating System | linux | linux_kernel | - | No |
| Operating System | microsoft | windows | - | No |
| Operating System | oracle | solaris | - | No |