Test ID:	1.3.6.1.4.1.25623.1.0.808652
Category:	General
Title:	IBM WebSphere MQ 'MQXR Service' Information Disclosure Vulnerability
Summary:	IBM WebSphere MQ is prone to an information disclosure vulnerability.
Description:	Summary: IBM WebSphere MQ is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to the passphrase used to access the keystore is written to the file system in clear text in a properties file that is world readable. Vulnerability Impact: Successful exploitation will allow local users to obtain sensitive information. Affected Software/OS: IBM WebSphere MQ version 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4. Solution: Upgrade to IBM WebSphere MQ version 7.1.0.7, or 7.5.0.6, or 8.0.0.4, or later. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2012 AIX APAR: IT09866 http://www-01.ibm.com/support/docview.wss?uid=swg1IT09866 http://www.securitytracker.com/id/1034943
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.