PT-2014-6140 · Ibm · Websphere Mq Classes For Java+1

Publicado 2014-10-19 · Atualizado 2017-08-29 · CVE-2014-4822

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ classes for Java libraries versions 8.0 before 8.0.0.1 IBM Websphere MQ Explorer versions 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2

Description The issue allows local users to discover preconfigured cleartext passwords via an unspecified trace operation.

Recommendations For IBM WebSphere MQ classes for Java libraries version 8.0, update to version 8.0.0.1 or later. For IBM Websphere MQ Explorer version 7.5, update to version 7.5.0.5 or later. For IBM Websphere MQ Explorer version 8.0, update to version 8.0.0.2 or later.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2014-4822

Produtos afetados

Websphere Mq Explorer

Websphere Mq Classes For Java

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/95467 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04023 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-4822 · Nota de Segurança
• http://secunia.com/advisories/59921 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21686339 · Aviso do Fabricante