IBM WebSphere MQ 7.1 < 7.1.0.1 MQ SVRCONN Channels Security Configuration Bypass

The version of IBM WebSphere MQ server 7.1 installed on the remote Windows host is missing fix pack 7.1.0.1 or later. It is, therefore, affected by a vulnerability where client applications can bypass the security configuration setup on an MQ SVRCONN channel, allowing unauthorized users access to...

CVE-2012-3295

CVE-2012-3295 affects IBM WebSphere MQ 7.1 where SVRCONN channels bypass the security-configuration setup and grant queue-manager access via unspecified vectors. The issue is documented in NVD/Nessus entries indicating that MQ 7.1 requires at least fix pack 7.1.0.1 or later to close the bypass. R...