CVE-2014-4822: IBM WebSphere Mq

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allow local users to discover preconfigured cleartext passwords via an unspecified trace operation.

Affected products

• IBM WebSphere Mq: version 8.0.0.0 only
• IBM WebSphere Mq Explorer: version 7.5.0.0 only; version 7.5.0.1 only; version 7.5.0.2 only; version 7.5.0.3 only; version 7.5.0.4 only; version 8.0.0.0 only; …

Published 2014-10-19. Last modified 2026-06-17.