CVE-2017-1118 IBM WebSphere MQ Internet Pass-Thru Denial of Service Vulnerability (swg22006580)

IBM WebSphere MQ Internet Pass-Thru is product extention for WebSphere MQ which is used to implement messaging solutions between remote sites.

IBM WebSphere MQ Internet Pass-Thru is prone to Denial of Service vulnerability if the security policy is not configured properly.

Affected Versions:
IBM WebSphere MQ Internet Pass-Thru v2.0
IBM WebSphere MQ Internet Pass-Thru v2.1

QID Detection Logic (authenticated):
The QID checks the vulnerable version of IBM WebSphere MQ Internet Pass-Thru by running the command /opt/mqipt/bin/mqiptVersion on a Linux OS machine.

Successful exploitation of vulnerability will lead to Denial of Service.

The vendor has released a fix to resolve the issue, please refer to Recommended fixes for WebSphere Application Serverfor more information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

swg22006580