← All advisories

Medium severity5.5NVD Advisory· Published Nov 16, 2021· Updated Jun 17, 2026

CVE-2021-38949

CVE-2021-38949

Description

IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

IBM/MQ4 versions
cpe:2.3:a:ibm:mq:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ibm:mq:*:*:*:*:*:*:*:*range: >=8.0.0.0,<8.0.0.14
- cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*range: >=9.1.0,<9.1.5
- cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*range: >=9.0.0.0,<9.0.0.9
- (no CPE)
IBM/Websphere Mq
cpe:2.3:a:ibm:websphere_mq:7.5:*:*:*:*:*:*:*
IBM/MQv5
Range: 8.0.0

Patches

Vulnerability mechanics

References

2

www.ibm.com/support/pages/node/6516424nvdPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/211403nvdBroken LinkVDB Entry

News mentions

0

No linked articles in our index yet.