The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a stash file.
Search vulnerabilities
CVE-2015-1985
CVSS 3.0 · 5.6 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2015-7420
Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7421.
CVSS 3.0 · 3.7 Low
EPSS 1.9%
KEV · Not listed
Vendors
Products
CVE-2015-7421
Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7420.
CVSS 3.0 · 3.7 Low
EPSS 1.8%
KEV · Not listed
Vendors
Products
CVE-2016-5879
MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted (1) Disaster Recovery or (2) High Availability command.
CVSS 3.0 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.