CVE-2024-54173

MEDIUM 4.7CVE-2024-54173 · Published 28/02/2025 · updated 17/06/2026

In short

CVE-2024-54173 is a MEDIUM (CVSS 4.7) vulnerability affecting mq appliance (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.13%, higher than 2.4% of all vulnerabilities.
Fix: update to 9.3.0.27, 9.4.0.10, 9.4.2 or later.

Package	Affected versions	Patched versions
mq appliance ibm	`≥ 9.3.0.0, < 9.3.0.27≥ 9.4.0.0, < 9.4.0.10< 9.4.2`	`9.3.0.279.4.0.109.4.2`

Description

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.

References

ibm.com/support/pages/node/7183370 · Vendor Advisory

More vulnerabilities in mq appliance

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mq appliance

ibm

≥ 9.3.0.0, < 9.3.0.27≥ 9.4.0.0, < 9.4.0.10< 9.4.2

9.3.0.279.4.0.109.4.2

More vulnerabilities in mq appliance

See all →