IBM WebSphere MQ classes for Java libraries 8.0 before 8.0.0.1 and Websphere MQ Explorer 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allow local users to discover preconfigured cleartext passwords via an unspecified trace operation.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Websphere_mq | Ibm | 8.0.0.0 (including) | 8.0.0.0 (including) |
| Websphere_mq_explorer | Ibm | 7.5.0.0 (including) | 7.5.0.0 (including) |
| Websphere_mq_explorer | Ibm | 7.5.0.1 (including) | 7.5.0.1 (including) |
| Websphere_mq_explorer | Ibm | 7.5.0.2 (including) | 7.5.0.2 (including) |
| Websphere_mq_explorer | Ibm | 7.5.0.3 (including) | 7.5.0.3 (including) |
| Websphere_mq_explorer | Ibm | 7.5.0.4 (including) | 7.5.0.4 (including) |
| Websphere_mq_explorer | Ibm | 8.0.0.0 (including) | 8.0.0.0 (including) |
| Websphere_mq_explorer | Ibm | 8.0.0.1 (including) | 8.0.0.1 (including) |
References
- http://secunia.com/advisories/59921
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT04023
- http://www-01.ibm.com/support/docview.wss?uid=swg21686339
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95467
- http://secunia.com/advisories/59921
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT04023
- http://www-01.ibm.com/support/docview.wss?uid=swg21686339
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95467