← Back

CVE-2023-28514

nvd nist
Published: May 19, 2023Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID: 250398.

Affected (4)

Products: Ibm: Mq
Ibm
1 product
Mq
Configuration A
4 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Ibm
Mq
Version 8.0.0.0
Mq
Version 9.0.0.0
Mq
Version 9.1.0.0
Mq
Version 9.1.0
Running on/withPlatform Versions
Hp
Hp Ux
All versions
Ibm
Aix
All versions
Ibm
I
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Oracle
Solaris
All versions

Related CWEs

CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (4)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.