IBM Security Bulletin: IBM WebSphere MQ is affected by a privilege escalation vulnerability (CVE-2017-1612)
IBM WebSphere MQ has addressed the following vulnerability. An undocumented environment variable intended for use by IBM support could be used to execute untrusted code using the ‘mqm’ user.
CVE(s): CVE-2017-1612
Affected product(s) and affected version(s):
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2qnX5HV
X-Force Database: http://ift.tt/2lTvDgz
The post IBM Security Bulletin: IBM WebSphere MQ is affected by a privilege escalation vulnerability (CVE-2017-1612) appeared first on IBM PSIRT Blog.
| Product | Affected Versions |
| IBM WebSphere MQ | 7.0.1.0 – 7.0.1.14 |
| IBM WebSphere MQ | 7.1.0.0 – 7.1.0.8 |
| IBM WebSphere MQ | 7.5.0.0 – 7.5.0.8 |
| IBM MQ | 8.0.0.0 – 8.0.0.7 |
| IBM MQ (LTS) | 9.0.0.0 – 9.0.0.1 |
| IBM MQ (CD) | 9.0.1.0 – 9.0.3.0 |
from IBM Product Security Incident Response Team http://ift.tt/2qlQy0v