IBM Security Bulletin: IBM MQ Trace enablement could cause denial of service (CVE-2017-1117)
IBM MQ could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled.
CVE(s): CVE-2017-1117
Affected product(s) and affected version(s):
IBM MQ V8.0
IBM MQ 8.0.0.0 – 8.0.0.5 maintenance levels
IBM MQ V9 CD
IBM MQ 9.0.1 only
IBM MQ V9 LTS
IBM MQ 9.0.0.0 only
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2sKmrA3
X-Force Database: http://ift.tt/2tk3vp0
The post IBM Security Bulletin: IBM MQ Trace enablement could cause denial of service (CVE-2017-1117) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2sKeOtt