| Package | Affected versions | Patched versions |
|---|---|---|
| websphere mq | = 7.1.0.3= 7.1.0.4= 7.1.0.5= 7.1.0.6= 7.5= 7.5.0.2= 7.5.0.3= 7.5.0.4= 7.5.0.5= 8.0= 8.0.0.1= 8.0.0.2= 8.0.0.3 |
The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free