Skip to content
OpenAdvisories
Medium · 6.2 CVE-2019-4239 EUVD-2019-13846GHSA-6hvx-2p4p-2h72

IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which can be read by a loc…

Published Jun 14, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: MQ Advanced Cloud Pak (IBM Cloud Private on RedHat OpenShift) Product: MQ Advanced Cloud Pak (IBM Cloud Private)

Description

IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 159465.

Affected products

VendorProductAffectedFixed
IBM MQ Advanced Cloud Pak (IBM Cloud Private) 1.0.0, 1.1.0, 1.2.0, 1.3.0, 2.0.0, 2.1.0, 2.2.0, 2.2.1, 2.2.2, 2.2.3, 3.0.0, 3.0.1 —
IBM MQ Advanced Cloud Pak (IBM Cloud Private on RedHat OpenShift) 1.0.0, 1.1.0, 1.2.0, 1.3.0, 2.0.0, 2.1.0, 2.2.0, 2.2.1, 2.2.2, 2.2.3, 3.0.0, 3.0.1 —

References