CVE-2024-54173

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.

Scoring

Severity

MEDIUM

CVSS base score

4.7

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS probability

0.13%

CWE

CWE-1323

Published

2025-02-28

Last modified

2026-03-13

Affected products

• IBM MQ

Weakness type

• CWE-1323

Related vulnerabilities

• CVE-2024-49338 — IBM App Connect Enterprise information disclosure

Markdown version · Browse all CVEs