| Package | Affected versions | Patched versions |
|---|---|---|
| mq | ≥ 8.0.0.4, ≤ 8.0.0.12≥ 9.0.0.0, ≤ 9.0.0.6≥ 9.1.0, ≤ 9.1.2≥ 9.1.0.0, ≤ 9.1.0.2 |
IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unauthorized user to conduct a session fixation attack due to clients not being disconnected as they should. IBM X-Force ID: 159352.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free