CVE-2015-1957
IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3 allows remote authenticated users to obtain sensitive information via a man-in-the-middle attack, related to duplication of message data in cleartext outside the protected payload. IBM X-Force ID: 103482.
- Score
- CVSS 3.0 5.3 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2018-04-10
- Last modified
- 2024-08-06
- Weaknesses
- CWE-200
Affected products
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21960506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/103482
