NetSight
IP …
medium4.3

CVE-2010-2637

IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote att…

Impact

IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application.

Affected products

VendorProductAffected versions
IbmWebsphere Mq
Versions 6.0, 6.0.0.0, 6.0.1.0, 6.0.1.1, 6.0.2.0, 6.0.2.1

Weakness classification

CWE-310

References