CVE-2023-47745
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638.
- Score
- CVSS 3.1 6.2 Medium
- Status
- Analyzed - psirt@us.ibm.com
- Published
- 2024-03-03
- Last modified
- 2024-08-02
- Weaknesses
- CWE-319
Affected products
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/272638
- https://www.ibm.com/support/pages/node/7126571
