« Volver al listado

CVE-2023-47745

Estado: AnalizadaMedia (5.5)—

IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — MQ Operator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-47745",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-47745",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-12T21:56:03.745379Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.2,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.5
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "IBM",
          "product": "MQ Operator",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.0 LTS",
              "versionType": "semver",
              "lessThanOrEqual": "2.0.18 LTS"
            },
            {
              "status": "affected",
              "version": "2.4.0",
              "versionType": "semver",
              "lessThanOrEqual": "2.4.7"
            },
            {
              "status": "affected",
              "version": "2.3.0",
              "versionType": "semver",
              "lessThanOrEqual": "2.3.3"
            },
            {
              "status": "affected",
              "version": "2.2.0",
              "versionType": "semver",
              "lessThanOrEqual": "2.2.2"
            },
            {
              "status": "affected",
              "version": "3.0.0 CD",
              "versionType": "semver",
              "lessThanOrEqual": "3.0.1 CD"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-03-03T12:15:36.280",
  "references": [
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/272638",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://www.ibm.com/support/pages/node/7126571",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/272638",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.ibm.com/support/pages/node/7126571",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@us.ibm.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-319"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command.  IBM X-Force ID:  272638."
    },
    {
      "lang": "es",
      "value": "IBM MQ Operador 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 a 2.4.7, 2.3.0 a 2.3.3, 2.2.0 a 2.2.2 y 2.3. 0 a 2.3.3 almacena o transmite credenciales de usuario en texto plano y sin formato que puede ser leído por un usuario local mediante un comando de seguimiento. ID de IBM X-Force: 272638."
    }
  ],
  "lastModified": "2026-06-17T06:33:12.443",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:mq_operator:*:*:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "976E62F2-8B84-48A7-B4EF-0F0E3100BCF1",
              "versionEndIncluding": "2.2.2",
              "versionStartIncluding": "2.2.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:mq_operator:*:*:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A899D4D9-04D0-404E-95BA-BFA1874B1188",
              "versionEndIncluding": "2.3.3",
              "versionStartIncluding": "2.3.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:mq_operator:*:*:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D80EFAA6-2FF7-4DAF-96CC-D494A97C8CF6",
              "versionEndIncluding": "2.4.7",
              "versionStartIncluding": "2.4.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:mq_operator:2.0.0:*:*:*:lts:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "570A5C73-FDC8-4AC5-B85D-DBC39B618BDF"
            },
            {
              "criteria": "cpe:2.3:a:ibm:mq_operator:2.0.18:*:*:*:lts:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1159A4CB-F5A6-48E7-8FBC-C7F568999A5D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:mq_operator:3.0.0:*:*:*:cd:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE86FF96-2C86-47A5-94BE-F17B271CA6BB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:mq_operator:3.0.1:*:*:*:cd:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DC6415E-F0D0-4C47-B048-733DA4B18D43"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}