IBM Security Bulletin: IBM MQ Appliance potential execution of arbitrary commands (CVE-2017-1318)

There is potential for an authenticated messaging administrator to execute arbitrary commands on the IBM MQ Appliance.

CVE(s): CVE-2017-1318

Affected product(s) and affected version(s):

IBM MQ Appliance 8.0
Maintenance levels between 8.0.0.0 and 8.0.0.6

IBM MQ Appliance 9.0.x Continuous Delivery (CD) Release
Continuous delivery updates 9.0.1 and 9.0.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2upRYXV
X-Force Database: http://ift.tt/2voanBT

The post IBM Security Bulletin: IBM MQ Appliance potential execution of arbitrary commands (CVE-2017-1318) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2upFqQH