CVE-2023-47745CWE-319

IBM MQ Container information disclosure

Medium · published March 3, 2024

CVSS v3.1
6.2
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00116 · 1.5th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2024-03-03T11:56Z
EPSS history
Timeline
  • 03 MAR 11:56Z
    IBM MQ Container information disclosure
    cvelistv5