Security Bulletin: IBM MQ Appliance potential access to queue manager private keys (CVE-2015-1985)

Summary There is potential for malicious users to access IBM MQ Appliance queue manager private keys without requiring knowledge of the password. Vulnerability Details CVEID: CVE-2015-1985 DESCRIPTION: IBM MQ Appliance M2000 could allow a malicious user with read authority to copied key repositor...

CVE-2015-1985

Affected product: IBM MQ Appliance M2000. Vulnerability: local attacker with read authority can bypass password and read private keys by exploiting the stash file in versions prior to 8.0.0.4. Root cause: stash-file presence enabling unauthorized access to key material. Impact: potential exposure...