CVE-2012-5952: Medium severity ibm websphere message broker vulnerability
IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2 does not validate Basic Authentication credentials before proceeding to WS-Addressing and WS-Security operations, which allows remote attackers to trigger transmission of unauthenticated messages via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5952?
CVE-2012-5952 has a medium severity rating, which indicates potential impact on confidentiality and integrity.
How do I fix CVE-2012-5952?
To fix CVE-2012-5952, upgrade IBM WebSphere Message Broker to version 6.1.0.12, 7.0.0.6, or 8.0.0.2 or later.
What versions of IBM WebSphere Message Broker are affected by CVE-2012-5952?
CVE-2012-5952 affects IBM WebSphere Message Broker versions 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2.
What type of attack does CVE-2012-5952 allow?
CVE-2012-5952 allows remote attackers to send unauthenticated messages by bypassing basic authentication.
Is there a workaround for CVE-2012-5952?
Currently, there are no official workarounds for CVE-2012-5952, and the best mitigation is upgrading to the patched versions.