5.1
/ 10
MEDIUM
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and IBM MQ CD 9.3.0.0 through 9.3.5.1 and 9.4.0.0 through 9.4.3.0 Java and JMS stores a password in client configuration files when trace is enabled which can be read by a local user.
Basic Information
ID
CVE-2025-36100
Source
ibm
Published
Sep 7, 2025 at 00:37
Affected Product
Vendor
IBM
Product
MQ
Version
9.1.0.0 LTS
Affected Versions
IBM MQ 9.1.0.0 LTS
IBM MQ 9.2.0.0 LTS
IBM MQ 9.3.0.0 LTS
IBM MQ 9.4.0.0 LTS
IBM MQ 9.3.0.0 CD
IBM MQ 9.4.0.0 CD
IBM MQ 9.2.0.0 LTS
IBM MQ 9.3.0.0 LTS
IBM MQ 9.4.0.0 LTS
IBM MQ 9.3.0.0 CD
IBM MQ 9.4.0.0 CD