CVE-2012-5952 | BDVDB-2026-54686 Detail

Description#

IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2 does not validate Basic Authentication credentials before proceeding to WS-Addressing and WS-Security operations, which allows remote attackers to trigger transmission of unauthenticated messages via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21623316
http://www-01.ibm.com/support/docview.wss?uid=swg1IC89803
https://exchange.xforce.ibmcloud.com/vulnerabilities/80666

Exploit#

No public exploit known

History#

Version 12013-02-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.