CVE-2010-2637 | BDVDB-2026-44007 Detail

Description#

IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg27007069
http://www-01.ibm.com/support/docview.wss?uid=swg27014224
https://exchange.xforce.ibmcloud.com/vulnerabilities/63114
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56005

Exploit#

No public exploit known

History#

Version 12010-11-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.