CVE-2015-1967
MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the...
MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the compatibility-mode option, which allows remote attackers to obtain sensitive information by sniffing the network for a session in which TLS is not used.
Exploit likelihood
What each source reports
NVD Score used
4.3
MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the compatibility-mode option, which allows remote attackers to obtain sensitive information by sniffing the network for a session in which TLS is not used.
- Record
CVE-2015-1967- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the compatibility-mode option, which allows remote attackers to obtain sensitive information by sniffing the network for a session in which TLS is not used.
- Record
CVE-2015-1967- Updated
- 2026-11-02
EUVDEUVD-2015-2072 No score
MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the compatibility-mode option, which allows remote attackers to obtain sensitive information by sniffing the network for a session in which TLS is not used.
- Record
EUVD-2015-2072- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4ghc-9j93-h7xg No score
MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the...
MQ Explorer in IBM WebSphere MQ before 8.0.0.3 does not recognize the absence of the compatibility-mode option, which allows remote attackers to obtain sensitive information by sniffing the network for a session in which TLS is not used.
- Record
GHSA-4ghc-9j93-h7xg- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-1967 is a medium vulnerability (CVSS 4.3) in Ibm Websphere Mq, published July 1, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.72%, the 77th percentile. No source names a fixed version.