CVE-2015-2012

The CVE-2015-2012 entry concerns IBM WebSphere MQ WMQ Telemetry’s MQXR Service. Affected are WMQ versions: 7.1 prior to 7.1.0.7, 7.5 up to 7.5.0.5, and 8.0 prior to 8.0.0.4. The vulnerability is an information disclosure caused by world-readable permissions on a plaintext file that contains the S...

CVE-2015-2012

The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file...

PT-2016-1269

Name of the Vulnerable Software and Affected Versions WebSphere MQ versions 7.1 before 7.1.0.7 WebSphere MQ versions 7.5 through 7.5.0.5 WebSphere MQ versions 8.0 before 8.0.0.4 Description The issue is related to the storage of registration data in a text file in an open manner. This could allow...

CVE-2015-2012: Exposure of Sensitive Information to an Unauthorized Actor

The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file...

CVE-2015-0176

Cross-site scripting XSS vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM WebSphere MQ 8.0 before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URI that is included in an error response...

CVE-2015-0176: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM WebSphere MQ 8.0 before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URI that is included in an error response...

PT-2014-2734

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ version 7.5 before 7.5.0.3 Description A directory traversal issue in WMQ Telemetry allows remote attackers to read arbitrary files by using a crafted URI. Recommendations For IBM WebSphere MQ version 7.5 before 7.5.0.3, updat...

CVE-2013-4054: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI...