CVE-2020-4528

Name of the Vulnerable Software and Affected Versions IBM MQ Appliance versions 2018.4.1.0 through 2018.4.1.12 IBM DataPower Gateway version 10.0.0.0

Description A local user, under special conditions, could obtain highly sensitive information from log files.

Recommendations For IBM MQ Appliance versions 2018.4.1.0 through 2018.4.1.12, restrict access to log files to minimize the risk of sensitive information disclosure. For IBM DataPower Gateway version 10.0.0.0, consider implementing additional logging controls to prevent unauthorized access to sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.