CVE Vulnerabilities

CVE-2019-4719

Published: Mar 16, 2020 | Modified: Aug 24, 2020
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data.

Affected Software

Name Vendor Start Version End Version
Mq Ibm 8.0.0.0 (including) 8.0.0.14 (excluding)
Mq Ibm 9.0.0.0 (including) 9.0.0.9 (including)
Mq Ibm 9.1.0 (including) 9.1.4 (excluding)
Mq Ibm 9.1.0.0 (including) 9.1.0.4 (excluding)
Mq_appliance Ibm 8.0.0.0 (including) 8.0.0.14 (excluding)
Mq_appliance Ibm 9.1.0 (including) 9.1.4 (excluding)
Mq_appliance Ibm 9.1.0.0 (including) 9.1.0.4 (excluding)
Websphere_mq Ibm 7.1.0.0 (including) 7.5.0.9 (including)

References