PT-2010-2514 · Ibm · Ibm Websphere Mq

Publicado 2010-10-20 · Atualizado 2017-08-17 · CVE-2010-0782

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 6.x before 6.0.2.10 IBM WebSphere MQ versions 7.x before 7.0.1.3

Description The issue allows remote attackers to spoof X.509 certificate authentication and send or receive channel messages via a crafted Subject Distinguished Name (DN) value in a certificate.

Recommendations For IBM WebSphere MQ versions 6.x before 6.0.2.10, update to version 6.0.2.10 or later. For IBM WebSphere MQ versions 7.x before 7.0.1.3, update to version 7.0.1.3 or later.

Correção

Identificadores relacionados

CVE-2010-0782

Produtos afetados

Ibm Websphere Mq

Referências · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ68707 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0782 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg27014224 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60018 · Nota