Clear Text Storage of User Credentials in IBM MQ Versions 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS

Clear Text Storage of User Credentials in IBM MQ Versions 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS

CVE-2021-38949 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403.

Learn more about our User Device Pen Test.