IBM MQ Information Disclosure Vulnerability (CNVD-2023-41892)

IBM MQ (IBM WebSphere MQ) is a messaging middleware product from International Business Machines (IBM). The product is mainly for the service-oriented architecture (SOA) to provide a reliable and proven messaging backbone. An information disclosure vulnerability exists in IBM MQ versions 8.0, 9.0, and 9.1 that originates from exposing sensitive information when a detailed error technical message is returned in a stack trace, which can be exploited by a local attacker to obtain sensitive credential information.