CVE-2020-4319

CVSS 3.1 LOWEPSS 0.7%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 3.1EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

28 Jul 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402.

CVSS:3.0/UI:N/I:N/PR:L/S:U/C:L/AC:H/A:N/AV:N/E:U/RC:C/RL:O

Affected products

IBM · MQ Appliance

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/177402 https://www.ibm.com/support/pages/node/6252777