CVEvulnerability

CVE-2020-4319

4.3 MEDIUM Published 2020-07-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.0 ([email protected])
3.1 LOW — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
Weaknesses
CWE-209

Description

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402.

Affected configurations

• ibm mq appliance (>= 8.0 < 8.0.0.15) • ibm mq appliance (>= 9.1.0.0 < 9.1.0.6) • ibm mq appliance (>= 9.1.0.0 < 9.2.0.0)

Related

Weakness · CWE (1)

  • CWE-209 Generation of Error Message Containing Sensitive Information weakness

References