- Description
- IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user.
- Source
- psirt@us.ibm.com
- NVD status
- Analyzed
- Products
- mq
CVSS 3.1
- Type
- Secondary
- Base score
- 5.5
- Impact score
- 3.6
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
- psirt@us.ibm.com
- CWE-526
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:mq:9.3.0:*:*:*:continuous_delivery:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89BDCCFD-C1DF-4E19-8597-DF87C56D7E09"
},
{
"criteria": "cpe:2.3:a:ibm:mq:9.3.0:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF356AA2-43D1-422A-80E1-822AE9C08094"
},
{
"criteria": "cpe:2.3:a:ibm:mq:9.4.0:*:*:*:continuous_delivery:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE929BED-85A5-42DB-AAA4-B3EB90A1231D"
},
{
"criteria": "cpe:2.3:a:ibm:mq:9.4.0:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A44B6FD0-B5C9-48BD-A3B2-CD607CA1D012"
}
],
"operator": "OR"
}
]
}
]