IBM WebSphere MQ 6.x prior to 6.0.2.10 and 7.x prior to 7.0.1.3 allows remote malicious users to spoof X.509 certificate authentication, and send or receive channel messages, via a crafted Subject Distinguished Name (DN) value in a certificate.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm websphere mq 6.0 |
||
ibm websphere mq 6.0.1.0 |
||
ibm websphere mq 6.0.2.5 |
||
ibm websphere mq 6.0.2.6 |
||
ibm websphere mq 6.0.1.1 |
||
ibm websphere mq 6.0.2.0 |
||
ibm websphere mq 6.0.2.7 |
||
ibm websphere mq 6.0.2.8 |
||
ibm websphere mq 6.0.2.3 |
||
ibm websphere mq 6.0.2.4 |
||
ibm websphere mq 6.0.2.1 |
||
ibm websphere mq 6.0.2.2 |
||
ibm websphere mq 6.0.2.9 |
||
ibm websphere mq 7.0.1.0 |
||
ibm websphere mq 7.0.1.1 |
||
ibm websphere mq 7.0.1.2 |
||
ibm websphere mq 7.0 |
||
ibm websphere mq 7.0.0.1 |
||
ibm websphere mq 7.0.0.2 |
Vulmon