CVE-2024-54173

published 2025-02-28

CVE-2024-54173: IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace…

medium 4.7 CVSS 3.1

AV L AC H PR L UI N S U C H I N A N

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	mq	—	—
ibm	mq_appliance	< 9.4.2	9.4.2
ibm	mq_appliance	>= 9.3.0.0 < 9.3.0.27	9.3.0.27
ibm	mq_appliance	>= 9.4.0.0 < 9.4.0.10	9.4.0.10

CWE-1323