IBM Websphere MQ Security Exit Bypass

Affected Products

Websphere MQ

CVE

CVE-2008-1130

The Websphere MQ service can be used to transfer messages between systems and applications. It is possible to protect the channels within the Queue Manager with a security exit which requires that an authentication check be passed before a connection can be established. A method of bypassing this authentication has been discovered which would enable unauthorised access to be gained.

The vendor has released a fix pack that addresses these issues and download details are available within the advisory.