IBM Security Bulletin: WebSphere Message Broker and IBM Integration Bus are affected by ‘Information Disclosure’ vulnerability
IBM WebSphere Message Broker/ IBM Integration Bus web user passwords are logged inside the service trace which can be read by an authorised local user
CVE(s): CVE-2017-1207
Affected product(s) and affected version(s):
IBM Integration Bus V10.0.0.0- 10.0.0.7
IBM Integration Bus V9.0.0.0- 9.0.0.7
WebSphere Message Broker V8.0.0.0 – 8.0.0.8
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2tC13Nz
X-Force Database: http://ift.tt/2sjbaCU
The post IBM Security Bulletin: WebSphere Message Broker and IBM Integration Bus are affected by ‘Information Disclosure’ vulnerability appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2tC14kB