CVE-2022-22321: IBM Mq

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protection. IBM X-Force ID: 218368.

Affected products

• IBM Mq: from 9.2.0, before 9.2.0.5 (fixed in 9.2.0.5); from 9.2.0, before 9.2.5 (fixed in 9.2.5)

Published 2022-03-01. Last modified 2026-06-17.