CVE-2021-38949

MEDIUM 5.5CVE-2021-38949 · Published 16/11/2021 · updated 17/06/2026

In short

CVE-2021-38949 is a MEDIUM (CVSS 5.5) vulnerability affecting mq (ibm), websphere mq (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.17%, higher than 5.7% of all vulnerabilities.
Fix: update to 8.0.0.14, 9.0.0.9, 9.1.5, 9.1.0.5 or later.

Package	Affected versions	Patched versions
mq ibm	`≥ 8.0.0.0, < 8.0.0.14≥ 9.0.0.0, < 9.0.0.9≥ 9.1.0, < 9.1.5≥ 9.1.0.0, < 9.1.0.5`	`8.0.0.149.0.0.99.1.59.1.0.5`
websphere mq ibm	`= 7.5`	No fix yet

IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 8.0.0.0, < 8.0.0.14≥ 9.0.0.0, < 9.0.0.9≥ 9.1.0, < 9.1.5≥ 9.1.0.0, < 9.1.0.5

8.0.0.149.0.0.99.1.59.1.0.5

= 7.5

No fix yet

More vulnerabilities in mq

See all →