Multiple IBM Products CVE-2018-1543 Information Disclosure Vulnerability

Bugtraq ID:	104587
Class:	Design Error
CVE:	CVE-2018-1543
Remote:	Yes
Local:	No
Published:	May 22 2018 12:00AM
Updated:	May 22 2018 12:00AM
Credit:	IBM.
Vulnerable:	IBM WebSphere MQ 8.0.0.9 IBM WebSphere MQ 8.0.0.8 IBM WebSphere MQ 8.0.0.7 IBM WebSphere MQ 8.0.0.5 IBM WebSphere MQ 8.0.0.4 IBM WebSphere MQ 8.0.0.3 IBM WebSphere MQ 8.0.0.2 IBM WebSphere MQ 8.0.0.1 IBM WebSphere MQ 8.0.0.0 IBM mq 9.0.0.3 LTS IBM mq 9.0.0.0
Not Vulnerable:	IBM WebSphere MQ 8.0.0.10 IBM mq 9.0.0.4

Multiple IBM Products CVE-2018-1543 Information Disclosure Vulnerability

Multiple IBM Products are prone to an information-disclosure vulnerability.

Successfully exploiting this issue may allow an attacker to obtain sensitive information that may aid in further attacks.

The following products are affected:

IBM WebSphere MQ v8.0.0.0 through 8.0.0.9
IBM MQ 9.0.0.0 through 9.0.0.3 LTS release

Multiple IBM Products CVE-2018-1543 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple IBM Products CVE-2018-1543 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple IBM Products CVE-2018-1543 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• swg22016346: Incorrect certficate validation vulnerability in IBM MQ.NET Managed (IBM)