CVE-2020-4338

Description

IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. IBM X-Force ID: 177937.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.1

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-4762,CVE-2020-4338 are affected in IBM MQ 9.1.4	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.1.2.0	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.0.3.7	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234