PT-2008-2726 · Ibm · Ibm Websphere Mq

Publicado 2008-03-04 · Atualizado 2011-03-08 · CVE-2008-1130

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 5.3 before Fix Pack 14 IBM WebSphere MQ versions 6.0.x before 6.0.2.2

Description The issue allows attackers to bypass access restrictions for a queue manager via a SVRCONN (MQ client) channel.

Recommendations For IBM WebSphere MQ versions 5.3 before Fix Pack 14, apply Fix Pack 14 to resolve the issue. For IBM WebSphere MQ versions 6.0.x before 6.0.2.2, update to version 6.0.2.2 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-1130

Produtos afetados

Ibm Websphere Mq

Referências · 6

• http://secunia.com/advisories/29170 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/0719 · Nota
• http://securityfocus.com/bid/28046 · Nota
• http://securitytracker.com/id?1019527 · Nota
• http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg1IZ01272 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-1130 · Nota de Segurança