Clear Text Password Transmission in IBM WebSphere MQ
CVE-2016-3052

5.9MEDIUM

Key Information:

Vendor

IBM Corporation
Status
WebSphere MQ
Vendor
CVE Published:
22 February 2017

What is CVE-2016-3052?

IBM WebSphere MQ has a vulnerability that allows for the transmission of sensitive password data in clear text under certain non-standard configurations. This can potentially expose the data to man-in-the-middle attackers, who can intercept and misuse this information during its transit. Organizations utilizing affected versions of the software should apply security best practices and consider implementing encryption to protect sensitive data during transmission.

Affected Version(s)

WebSphere MQ 8.0

References

http://www.ibm.com/support/docview.wss?uid=swg21998660
x_refsource_CONFIRM
http://www.securityfocus.com/bid/96400
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.