Description

IBM has acknowledged multiple vulnerabilities in IBM DB2 Query Management Facility for Workstation, WebSphere Message Broker, and DataQuant for Workstation, which can be exploited by malicious, local users to disclose potentially sensitive information, manipulate certain data, and cause a DoS (Denial of Service) and by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

For more information:
SA49472

The vulnerabilities are reported in the following versions:
* IBM DB2 Query Management Facility versions prior to 9.1.20 and 10.1.6.
* IBM WebSphere Message Broker versions 8.0, 7.0, and 6.1.
* IBM DataQuant versions prior to 1.2.16.

Solution
Apply update.
Further details available to Secunia VIM customers

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM:
http://www.ibm.com/support/docview.wss?uid=swg21614441
http://www.ibm.com/support/docview.wss?uid=swg21614442
http://www.ibm.com/support/docview.wss?uid=swg21612859

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers