VulnerabilityModified
CVE-2014-4822
IBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allow local users to discover preconfigured cleartext passwords via an unspecified trace operation.
LOW 1.9EPSS 0.35%
Does this matter?
Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.
Description
IBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allow local users to discover preconfigured cleartext passwords via an unspecified trace operation.
- CVSS 2.0
- 1.9 LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 0.35% probability · 29th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- ibm/websphere mq · ibm/websphere mq explorer
- Source
- psirt@us.ibm.com
References
- http://secunia.com/advisories/59921
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT04023
- http://www-01.ibm.com/support/docview.wss?uid=swg21686339Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95467
- http://secunia.com/advisories/59921
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT04023
- http://www-01.ibm.com/support/docview.wss?uid=swg21686339Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95467
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.