{"id":"CVE-2026-14252","kind":"vulnerability","aliases":["CVE-2026-14252"],"related":[],"title":"IBM MQ: sensitive data written to log files readable by local users","description":"IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD stores potentially sensitive information in log files that could be read by a local user.","summary":"IBM MQ versions 9.2, 9.3, 9.4 and 10.0 store potentially sensitive information in log files. A local user on the machine can read those logs and obtain the data.","severity":"medium","cvss":6.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ibm-mq","infrastructure","linux","messaging","windows"],"not_affected_if":["logs-restricted-to-admins","version-outside-range"],"how_to_check":"- Confirm the installed IBM MQ version (for example with `dspmqver`) and compare it with the affected ranges.\n- Review the permissions on the MQ log and error directories to see whether non-administrative local users can read them.","fix":null,"status":"open","published_at":"2026-11-04T21:18:12+00:00","first_seen_at":"2026-11-04T21:49:23+00:00","triaged_at":"2026-11-04T21:51:16+00:00","updated_at":"2026-11-04T21:51:16+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-04T21:51:16Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"IBM MQ: sensitive data written to log files readable by local users","impact":"low","summary":"IBM MQ versions 9.2, 9.3, 9.4 and 10.0 store potentially sensitive information in log files. A local user on the machine can read those logs and obtain the data.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-mq","messaging","linux","windows"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local users read sensitive information from MQ log files","analyst_note":"Check the IBM security bulletin for the fixed versions and the exact data logged; the sources given only cite NVD.","how_to_check":"- Confirm the installed IBM MQ version (for example with `dspmqver`) and compare it with the affected ranges.\n- Review the permissions on the MQ log and error directories to see whether non-administrative local users can read them.","plain_action":"","needs_analyst":true,"not_affected_if":["version-outside-range","logs-restricted-to-admins"],"who_is_affected":"Systems running IBM MQ in the affected version ranges, where local users other than the MQ administrators can read the log files. Hosts where MQ logs are restricted to administrators are lower risk. The sources do not describe which specific data is logged.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000676,"input_tokens":4219,"output_tokens":509,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-14252':15A,18A '-2026':14A,17A '10.0':33B '10.0.0.0':74C '10.0.0.5':76C '9.2':29B '9.2.0.0':57C '9.2.0.44':59C '9.3':30B '9.3.0.0':61C '9.3.0.42':63C '9.4':31B '9.4.0.0':65C,69C '9.4.0.26':67C '9.4.5.1':71C 'cd':72C,79C 'could':88C 'cve':13A,16A 'data':4A,54B 'file':8A,40B,86C 'ibm':1A,20B,26B,55C 'ibm-mq':19B 'inform':37B,83C 'infrastructur':22B 'linux':23B 'local':11A,42B,93C 'log':7A,39B,50B,85C 'lts':60C,64C,68C,77C 'machin':46B 'messag':24B 'mq':2A,21B,27B,56C 'obtain':52B 'potenti':35B,81C 'read':48B,90C 'readabl':9A 'sensit':3A,36B,82C 'store':34B,80C 'user':12A,43B,94C 'version':28B 'window':25B 'written':5A","nicknames":[],"mitigations":[],"who_affected":"Systems running IBM MQ in the affected version ranges, where local users other than the MQ administrators can read the log files. Hosts where MQ logs are restricted to administrators are lower risk. The sources do not describe which specific data is logged.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ibmmq","infrastructure","linux","medium","messaging","windows"],"campaign_type":null,"first_public_at":"2026-11-04T21:18:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-14252","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14252","severity":null,"published_at":"2026-11-04T21:18:12+00:00","modified_at":"2026-11-04T21:18:12+00:00","first_seen_at":"2026-11-04T21:49:23+00:00","fetched_at":"2026-11-04T21:49:23+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}