Description (CNA)
IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 159465.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / MQ Advanced Cloud Pak (IBM Cloud Private) | affected 1.0.0; affected 1.1.0; affected 1.2.0; affected 1.3.0; affected 2.0.0; affected 2.1.0; affected 2.2.0; affected 2.2.1; affected 2.2.2; affected 2.2.3; affected 3.0.0; affected 3.0.1 |
| IBM / MQ Advanced Cloud Pak (IBM Cloud Private on RedHat OpenShift) | affected 1.0.0; affected 1.1.0; affected 1.2.0; affected 1.3.0; affected 2.0.0; affected 2.1.0; affected 2.2.0; affected 2.2.1; affected 2.2.2; affected 2.2.3; affected 3.0.0; affected 3.0.1 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/docview.wss?uid=ibm10886591
- https://exchange.xforce.ibmcloud.com/vulnerabilities/159465
ADP enrichment
No English description supplied.