CVE-2015-2012

Published: Feb 8, 2016Modified: May 6, 2026

4.0

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.5 / Impact: 1.4

Source: NVD

Description

The MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5, and 8.0 before 8.0.0.4 uses world-readable permissions for a cleartext file containing the SSL keystore password, which allows local users to obtain sensitive information by reading this file.

Affected (13)

Products: Ibm: Websphere Mq

Ibm

1 product

Websphere Mq

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Mq	Version 7.1.0.3
Ibm Websphere Mq	Version 7.1.0.4
Ibm Websphere Mq	Version 7.1.0.5
Ibm Websphere Mq	Version 7.1.0.6
Ibm Websphere Mq	Version 7.5.0.2
Ibm Websphere Mq	Version 7.5.0.3
Ibm Websphere Mq	Version 7.5.0.4
Ibm Websphere Mq	Version 7.5.0.5
Ibm Websphere Mq	Version 7.5
Ibm Websphere Mq	Version 8.0.0.1
Ibm Websphere Mq	Version 8.0.0.2
Ibm Websphere Mq	Version 8.0.0.3
Ibm Websphere Mq	Version 8.0