IBM Security Bulletin: IBM WebSphere MQ and IBM MQ Managed File Transfer is affected by an undefined behavior because of insecure file permission vulnerability (CVE-2017-1699)
IBM WebSphere MQ and IBM MQ Managed File Transfer create certain files during startup. The file permissions set on those files are not secure allowing local attacks. This could lead to undefined behavior or remove any pending managed file transfers from an agent.
CVE(s): CVE-2017-1699
Affected product(s) and affected version(s):
WebSphere MQ V8.0.0.0 to V8.0.0.6
IBM MQ LTS V9.0.0.0 to V9.0.0.1
IBM MQ CD V9.0.1 to V9.0.3
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2lOaTGV
X-Force Database: http://ift.tt/2qkIQnj
The post IBM Security Bulletin: IBM WebSphere MQ and IBM MQ Managed File Transfer is affected by an undefined behavior because of insecure file permission vulnerability (CVE-2017-1699) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2ELaU6m