Security Bulletin: WebSphere Message Broker and IBM Integration Bus are affected by 'Information Disclosure' vulnerability

Summary IBM WebSphere Message Broker/ IBM Integration Bus web user passwords are logged inside the service trace which can be read by an authorised local user Vulnerability Details CVEID: CVE-2017-1207 DESCRIPTION: IBM WebSphere Message Broker logs user credentials in clear text which can be read...

IBM Integration Bus 8.x < 8.0.0.9 / 9.x < 9.0.0.8 / 10.x < 10.0.0.8 Multiple Vulnerabilities

The version of IBM Integration Bus formerly known as IBM WebSphere Message Broker installed on the remote host is 8.x prior to 8.0.0.9, 9.x prior to 9.0.0.8, or 10.x prior to 10.0.0.8. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists due to the u...

CVE-2017-1207

CVE-2017-1207 affects IBM WebSphere Message Broker and IBM Integration Bus. The root cause is that user credentials are logged or stored in plaintext in the service trace, allowing a locally authorized user to read passwords. Affected versions include IBM Integration Bus 9.x, 10.x (up to 10.0.0.7...