Information Disclosure in IBM WebSphere MQ Managed File Transfer
CVE-2017-1795

4.4MEDIUM

Key Information:

Vendor

IBM
Status
Websphere MQ
Vendor
CVE Published:
6 July 2018

What is CVE-2017-1795?

A vulnerability in IBM WebSphere MQ Managed File Transfer could allow a local user to access sensitive information via trace logs. This issue affects versions 7.5, 8.0, and 9.0 up to 9.0.4. Proper access controls and regular monitoring of logs are essential to mitigate risks associated with local user access to sensitive data.

Affected Version(s)

WebSphere MQ 7.5

WebSphere MQ 8.0

WebSphere MQ 9.0.1

References

http://www.ibm.com/support/docview.wss?uid=swg22012389
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/137042
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.