CVE-2025-0985CWE-526

IBM MQ information disclosure

Medium · published February 28, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD

stores potentially sensitive information in environment variables that could be obtained by a local user.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.0th percentile
Weakness
CWE-526 · Cleartext Storage of Sensitive Information in an Environment Variable
Published
2025-02-28T16:21Z
EPSS history
Timeline
  • 28 FEB 16:21Z
    IBM MQ information disclosure
    cvelistv5