CVE-2015-7462

IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output by leveraging administrator privileges to execute the mqcertck program.

Score

CVSS 3.0 4.4 Medium

Status

Modified - psirt@us.ibm.com

Published

2016-06-19

Last modified

2024-08-06

Weaknesses

CWE-200, CWE-255

Affected products

• Websphere Mq (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21984557
• http://www.securitytracker.com/id/1036053