CVE-2019-4239

IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 159465.

Score

CVSS 3.0 6.2 Medium

Status

Modified - psirt@us.ibm.com

Published

2019-06-14

Last modified

2024-09-16

Weaknesses

CWE-522

Affected products

• Cloud Private (Ibm)
• Mq Advanced Cloud Pak Ibm Cloud Private (Ibm)
• Mq Advanced Cloud Pak Ibm Cloud Private On Redhat Openshift (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/159465
• https://www.ibm.com/support/docview.wss?uid=ibm10886591