[NEWS] Websphere MQ MCAUSER Setting Bypass Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[NEWS] Websphere MQ Security Exit Authentication Bypass Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2008-1130

IBM WebSphere MQ vulnerable to authentication bypass on queue-manager access via an SVRCONN (MQ client) channel. Affected: WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 (also described as 5.1–5.3 and 6.0). Root cause: error in authentication check for a security exit/connection han...