CVE-2010-2637

CVE-2010-2637 affects IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1. The issue is that usernames and passwords are sent unencrypted in the security parameters field, allowing remote attackers to obtain sensitive information by sniffing traffic from a .NET client. The vulnerability is...