CVE-2010-2637
First published: Fri Nov 12 2010(Updated: )
IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM WebSphere MQ | =7.0.0.1 | |
| IBM WebSphere MQ | =6.0.1.0 | |
| IBM WebSphere MQ | =6.0 | |
| IBM WebSphere MQ | =6.0.2.4 | |
| IBM WebSphere MQ | =6.0.1.1 | |
| IBM WebSphere MQ | =6.0.2.7 | |
| IBM WebSphere MQ | =7.0.0.2 | |
| IBM WebSphere MQ | =6.0.0.0 | |
| IBM WebSphere MQ | =6.0.2.3 | |
| IBM WebSphere MQ | =6.0.2.1 | |
| IBM WebSphere MQ | =6.0.2.8 | |
| IBM WebSphere MQ | =6.0.2.2 | |
| IBM WebSphere MQ | =6.0.2.0 | |
| IBM WebSphere MQ | =6.0.2.10 | |
| IBM WebSphere MQ | =6.0.2.5 | |
| IBM WebSphere MQ | =6.0.2.6 | |
| IBM WebSphere MQ | =7.0 | |
| IBM WebSphere MQ | =7.0.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm websphere mq
- version/ibm websphere mq/7.0.0.1
- version/ibm websphere mq/6.0.1.0
- version/ibm websphere mq/6.0
- version/ibm websphere mq/6.0.2.4
- version/ibm websphere mq/6.0.1.1
- version/ibm websphere mq/6.0.2.7
- version/ibm websphere mq/7.0.0.2
- version/ibm websphere mq/6.0.0.0
- version/ibm websphere mq/6.0.2.3
- version/ibm websphere mq/6.0.2.1
- version/ibm websphere mq/6.0.2.8
- version/ibm websphere mq/6.0.2.2
- version/ibm websphere mq/6.0.2.0
- version/ibm websphere mq/6.0.2.10
- version/ibm websphere mq/6.0.2.5
- version/ibm websphere mq/6.0.2.6
- version/ibm websphere mq/7.0
- version/ibm websphere mq/7.0.1.0