VULNERABILITY INTELLIGENCE
CVE-2014-6116
CVSS score4.3 MEDIUM
EPSS probability1.28%
CISA KEVNot currently listed
Published2014-10-19
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
The Telemetry Component in WebSphere MQ 8.0.0.1 before p000-001-L140910 allows remote attackers to bypass authentication by setting the JAASConfig property in an MQTT client configuration.
Weakness classification
- CWE-287: Improper Authentication