1. Home
  2. CVE Database
  3. CVE-2015-1985
MEDIUM · 5.6

CVE-2015-1985

The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a stash file.

Vulnerability Description

The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a stash file.

CVSS Score

5.6

MEDIUM

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
IbmMq Appliance M2000<= 8.0.0.3

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2015-1985?

CVE-2015-1985 is a vulnerability with a CVSS score of 5.6 (MEDIUM). The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a stash file.

How severe is CVE-2015-1985?

CVE-2015-1985 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-1985?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Mq Appliance M2000.