PT-2026-20223 · Ibm · Ibm Mq+3

CVE-2025-12755 · Publicado 2026-02-17 · Atualizado 2026-02-17

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM MQ versions 3.2.0 through 3.8.1 IBM MQ LTS versions 2.0.0 through 2.0.29 IBM MQ 9.3.x versions IBM MQ 9.4.x versions

Description The software contains a flaw where log messages are not properly neutralized before being written to log files. This could allow an unauthorized user to inject malicious data into MQ log entries, potentially leading to misleading logs, log manipulation, or downstream log-processing issues.

Recommendations Update IBM MQ to a version later than 3.8.1. Update IBM MQ LTS to a version later than 2.0.29. Update IBM MQ 9.3.x to a later release. Update IBM MQ 9.4.x to a later release.

Correção

Enumeração de Fraquezas

CWE-117

Identificadores relacionados

CVE-2025-12755

Produtos afetados

Ibm Mq

Ibm Mq 9.3.X

Ibm Mq 9.4.X

Ibm Mq Lts

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-12755 · Nota de Segurança
• https://t.me/CVEtracker/44890 · Publicação no Telegram
• https://ibm.com/support/pages/node/7260087 · Correção, Aviso do Fabricante