CVE-2015-7462 Information disclosure in n/a

Medium 4.4 Published 19 Jun 2016 Updated 6 Aug 2024

Local administrators can discover cleartext certificate-keystore passwords in trace output, exposing sensitive credentials.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2015-7462?

CVE-2015-7462 is a medium-severity vulnerability in Ibm Websphere Mq, published on 19 Jun 2016. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output by leveraging administrator privileges to execute the mqcertck program.

Weakness: CWE-255, CWE-200

Which versions are affected by CVE-2015-7462?

It affects 1 product.

Products include Ibm Websphere Mq.

How do I fix CVE-2015-7462?

No fix has been published for CVE-2015-7462 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-7462 being exploited?

There is no known exploitation of CVE-2015-7462 in the wild and no public exploit code.

All Ibm Websphere Mq vulnerabilities

Sources

Also known as GHSA-2h82-jg6m-gm26.