| Package | Affected versions | Patched versions |
|---|---|---|
| websphere mq | = 6.0= 6.0.1.0= 6.0.1.1= 6.0.2.0= 6.0.2.1= 6.0.2.10= 6.0.2.2= 6.0.2.3= 6.0.2.4= 6.0.2.5= 6.0.2.6= 6.0.2.7= 6.0.2.8= 6.0.2.9= 7.0= 7.0.0.1= 7.0.0.2= 7.0.1.0= 7.0.1.1= 7.0.1.2= 7.0.1.3= 7.0.1.4 |
IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 does not use the CRL Distribution Points (CDP) certificate extension, which might allow man-in-the-middle attackers to spoof an SSL partner via a revoked certificate for a (1) client, (2) queue manager, or (3) application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free