Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can bypass CHLAUTH rules of IBM WebSphere MQ, in order
to access to the service.

Impacted products: WebSphere MQ

Severity: 2/4

Creation date: 09/10/2014

DESCRIPTION OF THE VULNERABILITY

The IBM WebSphere MQ product can be used to filter sessions.

However, a CHLAUTH rule following a CONNAUTH is not filtered.

An attacker can therefore bypass CHLAUTH rules of IBM WebSphere
MQ, in order to access to the service.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/IBM-WebSphere-MQ-bad-filtering-of-CHLAUTH-15458