CVE-2017-1795

Published: Jul 6, 2018Modified: Nov 21, 2024

4.4

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSphere MQ Managed File Transfer. IBM X-Force ID: 137042.

Affected (7)

Products: Ibm: Websphere Mq Managed File Transfer

Ibm

1 product

Websphere Mq Managed File Transfer

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Mq Managed File Transfer	From 8.0.0.0 to 8.0.0.8
Ibm Websphere Mq Managed File Transfer	From 9.0.0.0 to 9.0.0.2
Ibm Websphere Mq Managed File Transfer	Version 7.5.0.0

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Mq Managed File Transfer	Version 9.0.1
Ibm Websphere Mq Managed File Transfer	Version 9.0.2
Ibm Websphere Mq Managed File Transfer	Version 9.0.3
Ibm Websphere Mq Managed File Transfer	Version 9.0.4