IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mq | Ibm | 8.0.0.0 (including) | 8.0.0.14 (excluding) |
| Mq | Ibm | 9.0.0.0 (including) | 9.0.0.9 (excluding) |
| Mq | Ibm | 9.1.0 (including) | 9.1.5 (excluding) |
| Mq | Ibm | 9.1.0.0 (including) | 9.1.0.5 (excluding) |
| Websphere_mq | Ibm | 7.5 (including) | 7.5 (including) |