Non notée
CVE-2016-0360 IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted…
Description
IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allow a malicious user to execute arbitrary Java code by adding vulnerable classes to the classpath. IBM Reference #: 1983457.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WebSphere MQ | 9.0 | Pas de correctif indiqué |
| WebSphere MQ | 8.0 | Pas de correctif indiqué |
| WebSphere MQ | 7.5 | Pas de correctif indiqué |
| WebSphere MQ | 7.1 | Pas de correctif indiqué |
| WebSphere MQ | 7.0.1 | Pas de correctif indiqué |
Autres CVE de WebSphere MQ
Les 8 CVE de WebSphere MQ →
CVE-2017-1145
IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow…
Non notée
CVE-2016-8971
IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault…
Non notée
CVE-2016-9009
IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of…
Non notée
CVE-2016-3013
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling
Non notée