---
id: CVE-2026-14252
title: >-
  IBM MQ is affected by a pasword disclosure vulnerability in the runmqccred
  utility
summary: >-
  IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0
  through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through
  10.0.0.5 LTS and CD stores potentially sensitive information in log files that
  could be rea…
severity: medium
cvss: 6.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-532
vendor: IBM
product: MQ
affected:
  - MQ >= 9.2.0.0 <= 9.2.0.44
  - MQ >= 9.3.0.0 <= 9.3.0.42
  - MQ >= 9.4.0.0 <= 9.4.0.26
  - MQ >= 9.4.0.0 <= 9.4.5.1
  - MQ >= 10.0.0.0 <= 10.0.0.5
published: '2026-11-04'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T20:24:45.989Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-14252'
references:
  - url: 'https://www.ibm.com/support/pages/node/7294493'
tags:
  - cve.org
ingestedAt: '2026-11-05T21:36:00.549Z'
epss: 0.00121
epssPercentile: 0.01926
---

## Overview

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD stores potentially sensitive information in log files that could be read by a local user.

## Affected

- `MQ >= 9.2.0.0 <= 9.2.0.44`
- `MQ >= 9.3.0.0 <= 9.3.0.42`
- `MQ >= 9.4.0.0 <= 9.4.0.26`
- `MQ >= 9.4.0.0 <= 9.4.5.1`
- `MQ >= 10.0.0.0 <= 10.0.0.5`

## Remediation

This issue was addressed under Known Issue DT473111.



IBM MQ version 9.2 LTS



 Apply cumulative security update 9.2.0.46 https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts 



IBM MQ version 9.3 LTS



 Apply cumulative security update 9.3.0.43 https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts 



IBM MQ version 9.4 LTS



 Apply fix pack 9.4.0.30 https://www.ibm.com/support/pages/downloading-ibm-mq-94 



IBM MQ version 10.0.LTS



 Upgrade to IBM MQ version 10.0.0.6 https://www.ibm.com/support/pages/downloading-ibm-mq-100 



IBM MQ version 9.4 CD and 10.0 CD



 Upgrade to IBM MQ version 10.0.1.0 https://www.ibm.com/support/pages/downloading-ibm-mq-100