← Back

CVE-2020-4319

nvd nist
Published: Jul 28, 2020Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402.

Affected (3)

Products: Ibm: Mq Appliance
Ibm
1 product
Mq Appliance
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Mq Appliance
From 8.0 to 8.0.0.15
Mq Appliance
From 9.1.0.0 to 9.2.0.0
Mq Appliance
From 9.1.0.0 to 9.1.0.6

Related CWEs

CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (4)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.