Vulnerabilities > CVE-2025-0985

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
CWE-526
NVD
Published: 2025-02-28
Updated: 2025-02-28

Summary

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD stores potentially sensitive information in environment variables that could be obtained by a local user.

Common Weakness Enumeration (CWE)

References