CVE-2015-2012 in WebSphere MQinformación

Resumen

por MITRE

The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2015-02-18

Divulgación

2016-02-08

Moderación

aceptado

Artículo

VDB-80821

CPE

listo

EPSS

0.00039

KEV

no

Actividades

muy bajo

Fuentes

Want to know what is going to be exploited?

We predict KEV entries!