CVE-2014-4822: Low severity ibm websphere mq appliance vulnerability
IBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allow local users to discover preconfigured cleartext passwords via an unspecified trace operation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4822?
CVE-2014-4822 has been rated as a medium severity vulnerability due to its potential for local users to discover cleartext passwords.
How do I fix CVE-2014-4822?
To fix CVE-2014-4822, update WebSphere MQ classes for Java libraries to version 8.0.0.1 or higher, and WebSphere MQ Explorer to version 7.5.0.5 or higher.
What are the affected versions in CVE-2014-4822?
CVE-2014-4822 affects IBM WebSphere MQ classes for Java 8.0.0.0 and older, and IBM WebSphere MQ Explorer versions 7.5.0.0 to 7.5.0.4 and 8.0.0.0.
Can local users exploit CVE-2014-4822?
Yes, local users can exploit CVE-2014-4822 to access preconfigured cleartext passwords through an unspecified trace operation.
Is CVE-2014-4822 a remote vulnerability?
No, CVE-2014-4822 is a local vulnerability, meaning it can only be exploited by users with local access to the affected systems.