CVE-2019-4239

CWE-522 — Insufficiently Protected Credentials3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 86.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
IBM Cloud PrivateIBM MQ Advanced Cloud PAK (ibm Cloud Private)IBM MQ Advanced Cloud PAK (ibm Cloud Private ON Redhat Openshift)
Timeline
PublishedJun 14
Latest updateMay 24

Description

IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 159465.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDibm/cloud_private1.0.0 — 3.0.1+1

🔴Vulnerability Details

2
GHSA
GHSA-6hvx-2p4p-2h72: IBM MQ Advanced Cloud Pak (IBM Cloud Private 1↗2022-05-24
▶
CVEList
CVE-2019-4239: IBM MQ Advanced Cloud Pak (IBM Cloud Private 1↗2019-06-14
▶
CVE-2019-4239 (MEDIUM CVSS 5.5) | IBM MQ Advanced Cloud Pak (IBM Clou | cvebase.io