high7.3
CVE-2019-4227
IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unauthorized user to conduct a session fixatio…
Impact
IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unauthorized user to conduct a session fixation attack due to clients not being disconnected as they should. IBM X-Force ID: 159352.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Mq | from 8.0.0.4 through 8.0.0.12 from 9.0.0.0 through 9.0.0.6 from 9.1.0 through 9.1.2 from 9.1.0.0 through 9.1.0.2 |