PT-2025-9114 · Ibm · Ibm Mq

Published 2025-02-28 · Updated 2025-06-20 · CVE-2025-0985

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.3 LTS through 9.4 CD

Description The issue concerns the storage of potentially sensitive information in environment variables, which could be accessed by a local user.

Recommendations For IBM MQ versions 9.3 LTS through 9.4 CD, consider restricting access to environment variables to minimize the risk of sensitive information disclosure.

Fix

Weakness Enumeration

CWE-526

Related Identifiers

CVE-2025-0985

Affected Products

Ibm Mq

References · 7

• https://osv.dev/vulnerability/CVE-2025-0985 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0985 · Security Note
• https://ibm.com/support/pages/node/7184453 · Vendor Advisory
• https://t.me/cvenotify/112837 · Telegram Post
• https://t.me/cvedetector/19171 · Telegram Post
• https://t.me/cvenotify/126261 · Telegram Post
• https://twitter.com/CVEnew/status/1895619310045053007 · Twitter Post