CVE-2023-28950: IBM Mq

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358.

Affected products

• IBM Mq: version 8.0.0.0 only; version 9.0.0.0 only; version 9.1.0.0 only; version 9.2.0 only; version 9.3.0 only

Published 2023-05-19. Last modified 2026-06-17.