Description
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | MQ Operator | 2.0.0 LTS – ≤ 2.0.18 LTS, 2.4.0 – ≤ 2.4.7, 2.3.0 – ≤ 2.3.3, 2.2.0 – ≤ 2.2.2, 3.0.0 CD – ≤ 3.0.1 CD | — |
Advisories 1
- WID-SEC-2024-0521 IBM MQ: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024
References
- https://www.ibm.com/support/pages/node/7126571 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/272638 vdb-entry