Security Bulletin: IBM MQ and IBM MQ Appliance could allow a local attacker to obtain sensitive information. (CVE-2020-4338)

An incomplete fix for CVE-2019-4719 in IBM MQ and IBM MQ Appliance could still allow attackers to obtain sensitive information.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM MQ and IBM MQ Appliance	9.1 CD

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6172539

The post Security Bulletin: IBM MQ and IBM MQ Appliance could allow a local attacker to obtain sensitive information. (CVE-2020-4338) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2XDZRYz