CVE-2024-54173

published 2025-02-28

CVE-2024-54173: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace…

Priority P4 19 medium 4.7 CVSS 3.1

AV L AC H PR L UI N S U C H I N A N

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	mq	—	—
ibm	mq_appliance	< 9.4.2	9.4.2
ibm	mq_appliance	>= 9.3.0.0 < 9.3.0.27	9.3.0.27
ibm	mq_appliance	>= 9.4.0.0 < 9.4.0.10	9.4.0.10

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-1323