WMQI Security Exposure and Fix

The IBM WMQI 2.1 product utilizes a GUI component called the Control Center for message flow design and administration.  By default, this utilizes an insecure MQSeries client channel to connect to the Configuration Manager demon.  The following documentation and code provide a description of the problem that this introduces and a means of resolution.

Without a security exit in place, a WMQI deployment is insecure.

• PDF Document describing the nature and solution of the problem.
• ZIP file containing the code needed to resolve the problem.

Last Updated: 03/26/2002