Local Messaging Vulnerability in IBM MQ Appliance Products

CVE-2022-22321

What is CVE-2022-22321?

The IBM MQ Appliance versions 9.2 CD and 9.2 LTS exhibit a vulnerability where local messaging users are stored with a password hash that does not offer adequate protection. This security flaw may allow unauthorized access to sensitive information, compromising the confidentiality and integrity of messaging communications. Organizations using affected versions should implement recommended security controls to mitigate the risks associated with this vulnerability.

References