← CVE Intelligence

CVE-2025-36100

IBM MQ information disclosure PUBLISHED

Description (CNA)

IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and IBM MQ CD 9.3.0.0 through 9.3.5.1 and 9.4.0.0 through 9.4.3.0  Java and JMS stores a password in client configuration files when trace is enabled which can be read by a local user.

Affected (CNA)

Vendor / productVersions
IBM / MQaffected 9.1.0.0 through 9.1.0.29; affected 9.2.0.0 through 9.2.0.36; affected 9.3.0.0 through 9.3.0.30; affected 9.4.0.0 through 9.4.0.12
IBM / MQaffected 9.3.0.0 through 9.3.5.1; affected 9.4.0.0 through 9.4.3.0

CWE

CWE-260

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.