CVE-2014-4822

medium

Description

IBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allow local users to discover preconfigured cleartext passwords via an unspecified trace operation.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/95467

http://www-01.ibm.com/support/docview.wss?uid=swg21686339

http://www-01.ibm.com/support/docview.wss?uid=swg1IT04023

http://secunia.com/advisories/59921

Details

Source: Mitre, NVD

Published: 2014-10-19

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 1.9

Vector: CVSS2#AV:L/AC:M/Au:N/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.0005

Detections

Analytics