CVE-2014-4822

IBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allow local users to discover preconfigured cleartext passwords via an unspecified trace operation.

Score

CVSS 2.0 1.9 Low

Status

Modified - psirt@us.ibm.com

Published

2014-10-19

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Websphere Mq (Ibm)
• Websphere Mq Explorer (Ibm)

References

• http://secunia.com/advisories/59921
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04023
• http://www-01.ibm.com/support/docview.wss?uid=swg21686339
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95467