Beveiligingsadvies

CVE-2015-0173

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2015-06-28 14:00:00

Laatst bijgewerkt 2024-08-06 04:03:10

Toegewezen door ibm

CVSS-score geen score

Status PUBLISHED

Beschrijving

The HTTP connection-management functionality in Internet Pass-Thru (IPT) before 2.1.0.2 in IBM WebSphere MQ, when HTTPS is disabled, does not properly generate MQIPT Session IDs, which makes it easier for remote attackers to bypass intended restrictions on MQ message data by predicting an ID value.

← Alle CVE's bekijken Bekijk op cve.org ↗