Medium severity5.3NVD Advisory· Published Apr 10, 2018· Updated Jun 17, 2026
CVE-2015-1957
CVE-2015-1957
Description
IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3 allows remote authenticated users to obtain sensitive information via a man-in-the-middle attack, related to duplication of message data in cleartext outside the protected payload. IBM X-Force ID: 103482.
Affected products
2cpe:2.3:a:ibm:websphere_mq:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:websphere_mq:*:*:*:*:*:*:*:*range: >=7.5,<7.5.0.6
- (no CPE)range: < 7.5.0.6, < 8.0.0.3
Patches
Vulnerability mechanics
References
2- www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/103482nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.