PT-2017-12974 · Ibm · Ibm Websphere Mq

Published 2017-07-10 · Updated 2019-10-03 · CVE-2017-1337

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 9.0.1 through 9.0.2

Description The issue concerns the incorrect transmission of user credentials in plain text by the Java/JMS application.

Recommendations For IBM WebSphere MQ versions 9.0.1 through 9.0.2, update to a version that includes the fix for this issue to prevent the transmission of user credentials in plain text.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2017-1337

Affected Products

Ibm Websphere Mq

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-1337 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126245 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1337 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg22003853 · Vendor Advisory
• http://securityfocus.com/bid/99493 · Note