CVE-2025-36100 | IBM MQ up to 9.4.3.0 CD Client Configuration password in configuration file (EUVD-2025-27092 / Nessus ID 261408)
A vulnerability categorized as problematic has been discovered in IBM MQ up to 9.4.3.0 CD. Affected by this issue is some unknown functionality of the component Client Configuration Handler. The manipulation results in password in configuration file.
This vulnerability is identified as CVE-2025-36100. The attack is only possible with local access. There is not any exploit available.
It is advisable to upgrade the affected component.