CVE-2023-47745

MEDIUM

IBM MQ Operator Cleartext Transmission of Sensitive Information

Title source: llm
STIX 2.1

Description

IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory
https://www.ibm.com/support/pages/node/7126571

Scores

CVSS v3 6.2
EPSS 0.0012
EPSS Percentile 1.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-319
Status published
Products (5)
ibm/mq_operator 2.0.0
ibm/mq_operator 2.0.18
ibm/mq_operator 3.0.0
ibm/mq_operator 3.0.1
ibm/mq_operator 2.2.0 - 2.2.2
Published Mar 03, 2024
Tracked Since Feb 18, 2026