CVE-2015-0173 | BDVDB-2026-70112 Detail

Description#

The HTTP connection-management functionality in Internet Pass-Thru (IPT) before 2.1.0.2 in IBM WebSphere MQ, when HTTPS is disabled, does not properly generate MQIPT Session IDs, which makes it easier for remote attackers to bypass intended restrictions on MQ message data by predicting an ID value.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21699547
http://www.securitytracker.com/id/1032630

Exploit#

No public exploit known

History#

Version 12015-06-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.