Volerion logoVolerion
Volerion logoVolerion

IBM MQ Appliance Sensitive Information Disclosure Vulnerability in Web Console Trace Files

Vulnerability

A vulnerability in IBM MQ Appliance versions 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD allows for the disclosure of potentially sensitive information in trace files. This information could be accessed by a local user when the web console trace feature is enabled.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information in trace files, which could be read by a local user.

Remediation

Users of IBM MQ Appliance 9.3 LTS should apply the cumulative security update 9.3.0.27. Users of IBM MQ Appliance 9.3 CD should upgrade to fix pack 9.4.0.10. Users of IBM MQ Appliance 9.4 LTS should apply fix pack 9.4.0.10. Users of IBM MQ Appliance 9.4 CD should apply the 9.4.2 continuous delivery firmware release.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
2.5
exploitability
3.5
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.