PT-2014-6140 · Ibm · Websphere Mq Classes For Java+1

Published 2014-10-19 · Updated 2017-08-29 · CVE-2014-4822

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ classes for Java libraries versions 8.0 before 8.0.0.1 IBM Websphere MQ Explorer versions 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2

Description The issue allows local users to discover preconfigured cleartext passwords via an unspecified trace operation.

Recommendations For IBM WebSphere MQ classes for Java libraries version 8.0, update to version 8.0.0.1 or later. For IBM Websphere MQ Explorer version 7.5, update to version 7.5.0.5 or later. For IBM Websphere MQ Explorer version 8.0, update to version 8.0.0.2 or later.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2014-4822

Affected Products

Websphere Mq Explorer

Websphere Mq Classes For Java

References · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04023 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4822 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21686339 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95467 · Note
• http://secunia.com/advisories/59921 · Note