IBM MQ 8.0 <= 8.0.0.16 / 9.0 < 9.0.0.13 / 9.1 < 9.1.0.11 LTS / 9.1 < 9.2.5 CD / 9.2 LTS (6587837)

The version of IBM MQ Server running on the remote host is affected by a vulnerability as referenced in the 6587837 advisory. - IBM MQ IBM MQ for HPE NonStop 8.1.0 can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. IBM X-Force ID:...

Security Bulletin: IBM MQ trace can inadvertently trace sensitive data (CVE-2022-22325)

Summary An issue was identified with IBM MQ tracing logic used by queue managers and native C-based MQ clients that meant sensitive data could be captured while IBM MQ trace was running. This data would be stored in plaintext within the IBM MQ trace files. Vulnerability Details CVEID:...

Security Bulletin: IBM MQ Appliance is affected by sensitive information disclosure vulnerability (CVE-2022-22325)

Summary IBM MQ Appliance has resolved a sensitive information disclosure vulnerability. Vulnerability Details CVEID: CVE-2022-22325 DESCRIPTION: IBM MQ can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. CVSS Base score: 5.1 CVSS Tempor...

CVE-2022-22325

CVE-2022-22325 affects IBM MQ for HPE NonStop 8.1.0, where a local user can potentially obtain sensitive information from a stack trace. IBM’s bulletin describes this as a sensitive information disclosure via tracing logic, with CVSS v3.0/3.1 characteristics indicating local access and high confi...