Vulnerability Bulletins

IBM Security Bulletin: Queue manager repository manager integrity/abend caused by multiple transmit queue records (CVE-2015-0189)

   
Affected software IBM
 
A memory overwrite in the cluster repository manager can be triggered by a malicious user with IBM WebSphere MQ administrator privileges, leading to loss of data integrity and denial of service through abnormal termination of the cluster repository manager. CVE(s): CVE-2015-0189 Affected product(s) and affected version(s): IBM WebSphere MQ v8.0.0.1 and earlier IBM WebSphere MQ v7.5.0.4 and earlier Refer to the following reference URLs for remediation and additional vulnerability

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_queue_manager_repository_manager_integrity_abend_caused_by_multiple_transmit_queue_records_cve_2015_0189?lang=en_us