Description (CNA)
IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unauthorized user to conduct a session fixation attack due to clients not being disconnected as they should. IBM X-Force ID: 159352.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / MQ | affected 9.0.0.1; affected 8.0.0.4; affected 8.0.0.5; affected 8.0.0.6; affected 8.0.0.7; affected 9.0.0.2; affected 8.0.0.8; affected 8.0.0.9; affected 9.0.0.3; affected 8.0.0.10; affected 9.0.0.0; affected 9.0.0.4; affected 9.0.0.5; affected 9.1.0.0; affected 9.1.0.1; affected 9.1.1; affected 9.1.0.2; affected 9.1.2; affected 8.0.0.11; affected 9.0.0.6; affected 8.0.0.12 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/pages/node/886899
- https://exchange.xforce.ibmcloud.com/vulnerabilities/159352
ADP enrichment
No English description supplied.