Information Disclosure Vulnerability in IBM MQ Appliance

CVE-2021-39000

What is CVE-2021-39000?

An information disclosure vulnerability exists in IBM MQ Appliance versions 9.2 CD and 9.2 LTS, allowing a local attacker to retrieve sensitive data through the inclusion of diagnostic information. This vulnerability can compromise the confidentiality of sensitive data by exposing it unintentionally within the diagnostics, posing a risk to data security. Organizations using these versions should assess their exposure and apply necessary mitigations to protect against potential unauthorized access.

References