CVE 5.1 MEDIUM

IBM MQ information disclosure_CVE-2025-36100

5.1 / 10
MEDIUM
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and IBM MQ CD 9.3.0.0 through 9.3.5.1 and 9.4.0.0 through 9.4.3.0  Java and JMS stores a password in client configuration files when trace is enabled which can be read by a local user.

Basic Information

ID CVE-2025-36100
Source ibm
Published Sep 7, 2025 at 00:37

Affected Product

Vendor IBM
Product MQ
Version 9.1.0.0 LTS
Affected Versions IBM MQ 9.1.0.0 LTS
IBM MQ 9.2.0.0 LTS
IBM MQ 9.3.0.0 LTS
IBM MQ 9.4.0.0 LTS
IBM MQ 9.3.0.0 CD
IBM MQ 9.4.0.0 CD

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.