Vulnerability Bulletins |
IBM Security Bulletin: IBM WebSphere MQ keystore password traced by mqcertck on IBM i platform (CVE-2015-7462) |
|
| Affected software | IBM |
|
The mqcertck tool which was newly added in MQ 8.0.0.4 could trace certificate keystore passwords.CVE(s): CVE-2015-7462Affected product(s) and affected version(s):IBM WebSphere MQ for IBM i V8.0.0.4Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21984557X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/108392 More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-websphere-mq-keystore-password-traced-by-mqcertck-on-ibm-i-platform-cve-2015-7462/ |
|