Lucene search
IbmCVELIST:CVE-2021-38949HistoryNov 16, 2021 - 4:55 p.m.
CVE-2021-38949
2021-11-1616:55:19
ibm
www.cve.org
11
ibm
mq
credential
vulnerability
x-force
211403
CVSS3
6.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
AI Score
6.8
Confidence
Low
EPSS
0
Percentile
5.1%
IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403.
CNA Affected
[
{
"product": "MQ",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "8.0.0"
},
{
"status": "affected",
"version": "9.0.0"
},
{
"status": "affected",
"version": "9.1.0"
},
{
"status": "affected",
"version": "7.5.0"
}
]
}
]Related
cve
cve
CVE-2021-38949
2021-11-16 17:15:06
veracode
veracode
Information Disclosure
2022-02-16 03:41:18
ibm
ibm
prion
prion
Code injection
2021-11-16 17:15:00
nvd
nvd
CVE-2021-38949
2021-11-16 17:15:06
CVSS3
6.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
AI Score
6.8
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2021-38949