PT-2017-12974 · Ibm · Ibm Websphere Mq

Publicado 2017-07-10 · Atualizado 2019-10-03 · CVE-2017-1337

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 9.0.1 through 9.0.2

Description The issue concerns the incorrect transmission of user credentials in plain text by the Java/JMS application.

Recommendations For IBM WebSphere MQ versions 9.0.1 through 9.0.2, update to a version that includes the fix for this issue to prevent the transmission of user credentials in plain text.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2017-1337

Produtos afetados

Ibm Websphere Mq

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-1337 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126245 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-1337 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg22003853 · Aviso do Fabricante
• http://securityfocus.com/bid/99493 · Nota