CVE-2011-1378 — IBM Websphere MQ vulnerability

CWE-2643 documents3 sources
Severity
1.9LOWNVD
EPSS
0.1%
top 84.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere MQ
Timeline
PublishedNov 26
Latest updateMay 17

Description

IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.

CVSS vector

AV:L/AC:M/C:N/I:N/A:PExploitability: 3.4 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-fmhw-c29c-fhf7: IBM WebSphere MQ 6↗2022-05-17
▶
CVEList
CVE-2011-1378: IBM WebSphere MQ 6↗2011-11-26
▶
CVE-2011-1378 — IBM Websphere MQ vulnerability | cvebase