Flexera advisory is missing for the below
https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-can-inadvertently-display-cleartext-credentials-via-diagnostic-logs-cve-2021-38949/
Essentially, this was ignored as it requires local access to diagnostic files which need to be granted to privileged users solely.
As we already recommend the solutions, no Rejection Notice was issued.-> 8.0.0.14 recommended in SA93108-> 9.0.0.9 recommended in SA93824-> 9.1.0.5 recommended in SA96970-> 9.1.5 CD recommended in SA98547
View solution in original post
This thread has been automatically locked due to inactivity.
To continue the discussion, please start a new thread.
Riaz,
We have now escalated this to Secunia Research, and they are currently into this. We will get back to you ASAP.
