CVE-2015-7421

Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7420...

CVE-2015-7420

Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7421...

Design/Logic Flaw

Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7421...

Design/Logic Flaw

Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7420...

CVE-2015-7421

CVE-2015-7421 is a vulnerability in the GSKit component where the internal PRNG pool state is duplicated during a fork(), potentially allowing a remote attacker to obtain sensitive information due to predictable PRNG output. IBM bulletins confirm GSKit is used by IBM products (e.g., Content Manag...

CVE-2015-7420

CVE-2015-7420 is a GSKit vulnerability reported in IBM advisories affecting GSKit in IBM MQ M2000 appliances prior to 8.0.0.4. The issue allows a remote attacker to obtain sensitive information due to the GSKit PRNG state being duplicated during a fork, creating a window where child processes may...

PT-2013-59: XML External Entities Injection in Huawei M2000

The specialists of the Positive Research center have detected an XML External Entities Injection vulnerability in Huawei M2000. An XML document may contain a Document Type Definition that, among other features, allows the definition of external entities. A malicious user may perform attacks aimed...

PT-2013-58: Insufficient Session Security in Huawei M2000

The specialists of the Positive Research center have detected an Insufficient Session Security vulnerability in Huawei M2000. Access rights storage mechanism is vulnerable to cryptographic attacks. An attacker may calculate the new checksum and obtain elevated privileges via brute force attack. H...