CVE-2025-36100CWE-260

IBM MQ information disclosure

Medium · published September 7, 2025

CVSS v3.1
5.1
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and IBM MQ CD 9.3.0.0 through 9.3.5.1 and 9.4.0.0 through 9.4.3.0  Java and JMS stores a password in client configuration files when trace is enabled which can be read by a local user.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00104 · 1.0th percentile
Weakness
CWE-260 · Password in Configuration File
Published
2025-09-07T00:37Z
EPSS history
Timeline
  • 07 SEP 00:37Z
    IBM MQ information disclosure
    cvelistv5