|
|
| News |
March 28, 2008
MWR InfoSecurity publish two Websphere advisories
Two advisories were published today for vulnerabilities within Websphere. The first of these relates to MQ MCAUSER setting bypass vulnerability where a method of bypassing this authorisation control has been discovered which would enable unauthorised access to be gained.
The second vulnerability concerns MQ security exit authentication. Within Websphere MQ it is possible to protect the channels within the Queue Manager with a security exit which requires that an authentication check be passed before a connection can be established. A method of bypassing this authentication has been discovered which would enable unauthorised access to be gained.
The full advisories and links to patches can be viewed here.
|
|
|
 |
|
