IBM Security Bulletin: Password disclosure via trace log vulnerability in IBM MQ Managed File Transfer (CVE-2017-1795)
Jul 3, 2018 9:00 am EDT
Categorized: Medium Severity
Share this post:
Trace files generated by IBM MQ Managed File Transfer commands display passwords in plain text.
CVE(s): CVE-2017-1795
Affected product(s) and affected version(s):
IBM MQ Managed File Transfer v8.0.0.0 through v8.0.0.8
IBM MQ Managed File Transfer v9.0.0.0 through v9.0.0.2 (LTS Release)
IBM MQ Managed File Transfer v9.0.1, v9.0.2, v9.0.3 and v9.0.4 (CD Release)
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22012389
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137042
from IBM Product Security Incident Response Team https://ift.tt/2KMeseF