PT-2023-22050 · Ibm · Ibm Mq

Published 2023-05-19 · Updated 2023-05-26 · CVE-2023-28950

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM MQ versions 8.0 through 9.3

Description The issue could disclose sensitive user information from a trace file if that functionality has been enabled.

Recommendations For IBM MQ versions 8.0 through 9.3, disable the trace file functionality to prevent sensitive user information disclosure.

Fix

Related Identifiers

CVE-2023-28950

Affected Products

Ibm Mq

References · 5

• https://osv.dev/vulnerability/CVE-2023-28950 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28950 · Security Note
• https://https//www.ibm.com/support/pages/node/6985837 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/251358 · Vendor Advisory
• https://t.me/cibsecurity/64467 · Telegram Post