CVE-2010-2637
Status: ModifiedMedium (4.3)—
IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application.
CVSS
- Version: 2.0
- Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
- Base score: 4.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.67%
- Percentile among all scored CVEs: 76
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-310
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56005
- http://www-01.ibm.com/support/docview.wss?uid=swg27007069
- http://www-01.ibm.com/support/docview.wss?uid=swg27014224
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63114
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56005
- http://www-01.ibm.com/support/docview.wss?uid=swg27007069
- http://www-01.ibm.com/support/docview.wss?uid=swg27014224
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63114
Raw JSON (NVD)
Show
{
"id": "CVE-2010-2637",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-11-12T21:00:01.283",
"references": [
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56005",
"source": "cve@mitre.org"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg27007069",
"source": "cve@mitre.org"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg27014224",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63114",
"source": "cve@mitre.org"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ56005",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg27007069",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg27014224",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/63114",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-310"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application."
},
{
"lang": "es",
"value": "IBM WebSphere MQ v6.0 anterior v6.0.2.9 y v7.0 anterior v7.0.1.1 no encripta el nombre de usuarios y password en el campos de parámetros de seguridad, lo que permite a atacantes remotos a obtener información sensible por captura de tráfico de red desde una aplicación cliente .NET. \r\n\r\n"
}
],
"lastModified": "2026-06-16T23:21:07.647",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6D2279B-482A-4CA6-9EF2-C57A95969BC2"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9728448F-E295-4C33-B2F4-17FAAFCDF169"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F36C644-664C-4758-9762-E808C80AE904"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C670A3F-7BBB-4115-A037-B5E732ABB6BA"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24CD8F97-39E0-455C-92CA-F0FE9AE5A0CC"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C97EC1D0-CA59-4E2C-84EB-054BF27D1BCF"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CCD33A5-6567-43CB-909D-D1851ACF4AA8"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3664585-D0B4-467C-9B6D-4F8E239F7DCD"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2216808-BAE9-4034-9618-5EC4CCB80E7F"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6263B9D-A62A-4E41-958A-968F9ACA0CE6"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19983CDF-4769-4B56-98ED-CE7EE0C1AFF6"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9377F533-15D0-4F81-B7C1-A84E5346EF6C"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86A87B5A-D0B8-4F49-A655-CC5AC737782F"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:6.0.2.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFF09F4C-9F56-4931-8839-044491B5FA40"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "594287A4-AF30-4872-A5B8-1421FAB5C674"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "896273C9-11F9-45A0-BA46-66F37DFACCC7"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF396289-8409-4FE2-96DB-99818D5680B4"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_mq:7.0.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6E60ABB-E703-4745-98F3-22609FF70F6F"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}