Security Bulletin: IBM WebSphere MQIPT Session IDs are predictable (CVE-2015-0173)

Summary The MQIPT Session IDs for HTTP communication that are generated by MQIPT V2.0 and later are predictable. Vulnerability Details CVEID: CVE-2015-0173 DESCRIPTION: IBM WebSphere MQ Internet Pass-Thru HTTP connection management contains a security flaw which could allow interception of MQ...

CVE-2013-5401

The command-port listener in IBM WebSphere MQ Internet Pass-Thru MQIPT 2.x before 2.1.0.1 allows remote attackers to cause a denial of service remote-administration outage via unspecified vectors...