CVE-2023-28950

🗓️ 19 May 2023 15:20:50Reported by ibmType

IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 sensitive user info disclosur

Reporter	Title	Published	Views	Family All 17
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that use MQ Client nodes are vulnerable to disclosure of sensitive information due to [CVE-2023-28950]	1 Jun 202314:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple issues due to IBM MQ	11 Apr 202413:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a denial of service due to IBM MQ (CVE-2023-26285, CVE-2023-28950)	21 Jul 202312:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ trace can inadvertently trace sensitive data (CVE-2023-28950)	10 May 202317:52	–	ibm
Circl	CVE-2023-28950	19 May 202320:33	–	circl
CNNVD	IBM MQ 安全漏洞	19 May 202300:00	–	cnnvd
Cvelist	CVE-2023-28950 IBM MQ information disclosure	19 May 202315:20	–	cvelist
EUVD	EUVD-2023-32568	3 Oct 202520:07	–	euvd
Tenable Nessus	IBM MQ Information Disclosure (6985837)	12 May 202300:00	–	nessus
NCSC	Vulnerabilities fixed in IBM MQ	2 May 202300:00	–	ncsc

NVD

Vulners

Node

ibm mqMatch8.0.0.0

ibm mqMatch9.0.0.0lts

ibm mqMatch9.1.0.0lts

ibm mqMatch9.2.0continuous_delivery

ibm mqMatch9.2.0lts

ibm mqMatch9.3.0continuous_delivery

ibm mqMatch9.3.0lts

AND

hp hp-uxMatch-

ibm aixMatch-

ibm iMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

oracle solarisMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "MQ",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.2 CD, 9.3 LTS, 9.3 CD"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/251358
https	www.https//www.ibm.com/support/pages/node/6985837

21 Nov 2024 07:56Current

5Medium risk

Vulners AI Score5

CVSS 3.15.1 - 5.5

EPSS0.0004

SSVC

ibm mq 8.0 9.0 9.1 9.2 9.3 user info disclosure trace file ibm x-force cve-2023-28950 nvd