Vulnerability Bulletins |
IBM Security Bulletin: IBM WebSphere MQIPT Session IDs are predictable (CVE-2015-0173) |
|
| Affected software | IBM |
|
The MQIPT Session IDs for HTTP communication that are generated by MQIPT V2.0 and later are predictable. CVE(s): CVE-2015-0173 Affected product(s) and affected version(s): IBM WebSphere MQ Internet Pass-Thru (SupportPac MS81) Versions 2.1.0.1 and earlier Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21699547 X-Force Database: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_websphere_mqipt_session_ids_are_predictable_cve_2015_0173?lang=en_us |
|