Security Bulletin: IBM MQ Appliance is affected by an information disclosure vulnerability (CVE-2020-4498)

Summary

IBM MQ Appliance has resovled an information disclosure vulnerability.

Vulnerability Details

CVEID:CVE-2020-4498
**DESCRIPTION:**IBM MQ could allow a local privileged user to obtain highly sensitve information due to inclusion of data within trace files.
CVSS Base score: 4.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/182118 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

Remediation/Fixes

IBM MQ Appliance 9.1 LTS

Apply fixpack 9.1.0.6, or later.

IBM MQ Appliance 9.1 CD

Apply IBM MQ Appliance 9.2, or later.

Workarounds and Mitigations

None