CVE-2018-1543

MEDIUM

IBM WebSphere MQ 8.0 and 9.0 - Improper Certificate Validation

Title source: llm
STIX 2.1

Description

IBM WebSphere MQ 8.0 and 9.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142598.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg22016346
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/142598

Scores

CVSS v3 5.9
EPSS 0.0110
EPSS Percentile 61.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-295
Status published
Products (2)
ibm/websphere_mq 8.0
ibm/websphere_mq 9.0
Published Jun 27, 2018
Tracked Since Feb 18, 2026