IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters.
| Software | From | Fixed in |
|---|---|---|
| ibm / mq_appliance | 9.3.0.0 | 9.3.0.27.x |
| ibm / mq_appliance | 9.4.0.0 | 9.4.0.10.x |
| ibm / mq_appliance | 9.3.0 | 9.4.2.x |