CVE-2023-47745 - OpenCVE

IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638.

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

No data.

No data.

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/272638
https://www.ibm.com/support/pages/node/7126571

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: ibm

Published: 2024-03-03T11:56:00.503Z

Updated: 2024-03-03T11:56:00.503Z

Reserved: 2023-11-09T11:31:41.193Z

Link: CVE-2023-47745

JSON object: View

NVD Information

Status : Awaiting Analysis

Published: 2024-03-03T12:15:36.280

Modified: 2024-03-04T13:58:23.447

Link: CVE-2023-47745

JSON object: View

Redhat Information

No data.

CWE

CWE-319

{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"cveId": "CVE-2023-47745", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2023-11-09T11:31:41.193Z", "datePublished": "2024-03-03T11:56:00.503Z", "dateUpdated": "2024-03-03T11:56:00.503Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "MQ Operator", "vendor": "IBM", "versions": [{"lessThanOrEqual": "2.0.18 LTS", "status": "affected", "version": "2.0.0 LTS", "versionType": "semver"}, {"lessThanOrEqual": "2.4.7", "status": "affected", "version": "2.4.0", "versionType": "semver"}, {"lessThanOrEqual": "2.3.3", "status": "affected", "version": "2.3.0", "versionType": "semver"}, {"lessThanOrEqual": "2.2.2", "status": "affected", "version": "2.2.0", "versionType": "semver"}, {"lessThanOrEqual": "3.0.1 CD", "status": "affected", "version": "3.0.0 CD", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638."}], "value": "IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-319", "description": "CWE-319 Cleartext Transmission of Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2024-03-03T11:56:00.503Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/7126571"}, {"tags": ["vdb-entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/272638"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM MQ Container information disclosure", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}}}