medium6.2
CVE-2023-47745
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or tra…
Impact
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Mq Operator | from 2.2.0 through 2.2.2 from 2.3.0 through 2.3.3 from 2.4.0 through 2.4.7 Versions 2.0.0, 2.0.18, 3.0.0 |