CVE-2016-0259 — Sensitive Information Exposure in IBM Websphere MQ

CWE-200 — Sensitive Information Exposure5 documents4 sources
Severity
2.5LOWNVD
EPSS
0.0%
top 86.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere MQ
Timeline
PublishedJun 26
Latest updateMay 17

Description

runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp authority requirement and obtain sensitive information via unspecified display commands.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.0 | Impact: 1.4

Affected Packages1 packages

▶NVDibm/websphere_mq4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-gc73-gv97-gqrp: runmqsc in IBM WebSphere MQ 8↗2022-05-17
▶
CVEList
CVE-2016-0259: runmqsc in IBM WebSphere MQ 8↗2016-06-26
▶

🕵️Threat Intelligence

2
Talos
Vulnerability Spotlight: Adobe Acrobat Reader DC jpeg Decoder Vulnerability↗2017-01-20
▶
Talos
Vulnerability Spotlight: Adobe Acrobat Reader DC jpeg Decoder Vulnerability↗2017-01-20
▶
CVE-2016-0259 — Sensitive Information Exposure in IBM | cvebase