IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mq | Ibm | 8.0.0.0 (including) | 8.0.0.14 (excluding) |
| Mq | Ibm | 9.0.0.0 (including) | 9.0.0.9 (including) |
| Mq | Ibm | 9.1.0 (including) | 9.1.4 (excluding) |
| Mq | Ibm | 9.1.0.0 (including) | 9.1.0.4 (excluding) |
| Mq_appliance | Ibm | 8.0.0.0 (including) | 8.0.0.14 (excluding) |
| Mq_appliance | Ibm | 9.1.0 (including) | 9.1.4 (excluding) |
| Mq_appliance | Ibm | 9.1.0.0 (including) | 9.1.0.4 (excluding) |
| Websphere_mq | Ibm | 7.1.0.0 (including) | 7.5.0.9 (including) |