CVE-2017-1337 — Insufficiently Protected Credentials in IBM Websphere MQ

CWE-522 — Insufficiently Protected Credentials5 documents4 sources
Severity
8.1HIGHNVD
EPSS
0.3%
top 48.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM MQIBM Websphere MQ
Timeline
PublishedJul 10
Latest updateMay 13

Description

IBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials in plain text. IBM X-Force ID: 126245.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.2 | Impact: 5.9

Affected Packages2 packages

▶NVDibm/websphere_mq9.0.1, 9.0.2+1
▶CVEListV5ibm/mq9.0.1, 9.0.2+1

🔴Vulnerability Details

2
GHSA
GHSA-h8mc-pmw5-vp98: IBM WebSphere MQ 9↗2022-05-13
▶
CVEList
CVE-2017-1337: IBM WebSphere MQ 9↗2017-07-10
▶

💥Exploits & PoCs

2
Exploit-DB
EyesOfNetwork (EON) 5.0 - Remote Code Execution↗2017-03-27
▶
Exploit-DB
Wireless IP Camera (P2P) WIFICAM - Remote Code Execution↗2017-03-08
▶
CVE-2017-1337 — Insufficiently Protected Credentials | cvebase