Vulnerability in IBM Websphere Mq

CVE-2014-4822

IBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allow local users to discover preconfigured cleartext passwords via an unspecified trace operation.

EPSS: 0.004 (27.9th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_mq — versions 8.0.0.0
Ibm Websphere_mq_explorer — versions 7.5.0.0, 7.5.0.1, 7.5.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)