CVEvulnerability

CVE-2010-2637

4.3 MEDIUM Published 2010-11-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-11-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-310

Description

IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application.

Affected configurations

• ibm websphere mq 6.0 • ibm websphere mq 6.0.0.0 • ibm websphere mq 6.0.1.0 • ibm websphere mq 6.0.1.1 • ibm websphere mq 6.0.2.0 • ibm websphere mq 6.0.2.1 • ibm websphere mq 6.0.2.2 • ibm websphere mq 6.0.2.3 • ibm websphere mq 6.0.2.4 • ibm websphere mq 6.0.2.5 • ibm websphere mq 6.0.2.6 • ibm websphere mq 6.0.2.7 • ibm websphere mq 6.0.2.8 • ibm websphere mq 6.0.2.10 • ibm websphere mq 7.0 • ibm websphere mq 7.0.0.1 • ibm websphere mq 7.0.0.2 • ibm websphere mq 7.0.1.0

Related

Weakness · not in database (1)

References