Design/Logic Flaw

The HTTP connection-management functionality in Internet Pass-Thru IPT before 2.1.0.2 in IBM WebSphere MQ, when HTTPS is disabled, does not properly generate MQIPT Session IDs, which makes it easier for remote attackers to bypass intended restrictions on MQ message data by predicting an ID value...

CVE-2015-0173: Undefined Security Weakness

The HTTP connection-management functionality in Internet Pass-Thru IPT before 2.1.0.2 in IBM WebSphere MQ, when HTTPS is disabled, does not properly generate MQIPT Session IDs, which makes it easier for remote attackers to bypass intended restrictions on MQ message data by predicting an ID value...

PT-2015-4509

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ Internet Pass-Thru versions prior to 2.1.0.2 Description The issue affects the HTTP connection-management functionality when HTTPS is disabled, leading to improper generation of MQIPT Session IDs. This makes it easier for remo...