IBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials in plain text. IBM X-Force ID: 126245.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Websphere_mq | Ibm | 9.0.1 (including) | 9.0.1 (including) |
| Websphere_mq | Ibm | 9.0.2 (including) | 9.0.2 (including) |