PT-2008-2726 · Ibm · Ibm Websphere Mq

Published 2008-03-04 · Updated 2011-03-08 · CVE-2008-1130

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 5.3 before Fix Pack 14 IBM WebSphere MQ versions 6.0.x before 6.0.2.2

Description The issue allows attackers to bypass access restrictions for a queue manager via a SVRCONN (MQ client) channel.

Recommendations For IBM WebSphere MQ versions 5.3 before Fix Pack 14, apply Fix Pack 14 to resolve the issue. For IBM WebSphere MQ versions 6.0.x before 6.0.2.2, update to version 6.0.2.2 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-1130

Affected Products

Ibm Websphere Mq

References · 6

• http://secunia.com/advisories/29170 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg1IZ01272 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1130 · Security Note
• http://vupen.com/english/advisories/2008/0719 · Note
• http://securityfocus.com/bid/28046 · Note
• http://securitytracker.com/id?1019527 · Note