CVE-2024-54173

Summary

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.

Affected Software

VendorProductVersion RangeStatus
IBMMQ9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CDaffected

Weaknesses

  • CWE-1323: CWE-1323 Improper Management of Sensitive Trace Data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References