MQSeries.net :: View topic - [Hackers] MQ Classes for Java under App Server //Security

middlewareonline

We are using MQ Series Class for Java ( MQ JMS) inside Application Server which is running as root ( to open port 80 for http requests).

Security department is concerned that third party libs ( MA88) classes that are opening conenctions outside of the corporation have chances of getting hacked. We are not using MQIPT or anything else at thispoint. We directly conenct to other's MQ Queue Managers. If the other site is hacked - what is our exposure to any sich attck ?

Are there any threat in running the MQ Java Classes as mentioned in our senario ? [Without the use of MQIPT]

Any experience in this regard is highly appreciated. Some may think that this is a far fetched idea due to JVM's security Manager etc. But, who knows ?

Raj