Lucene search

K
cve[email protected]CVE-2009-0439
HistoryFeb 24, 2009 - 5:30 p.m.

CVE-2009-0439

2009-02-2417:30:00
CWE-264
web.nvd.nist.gov
24
ibm
websphere
mq
wmq
vulnerability
local users
privileges
authorization commands
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Unspecified vulnerability in the queue manager in IBM WebSphere MQ (WMQ) 5.3, 6.0 before 6.0.2.6, and 7.0 before 7.0.0.2 allows local users to gain privileges via vectors related to the (1) setmqaut, (2) dmpmqaut, and (3) dspmqaut authorization commands.

Affected configurations

NVD
Node
ibmwebsphere_mqMatch5.3
OR
ibmwebsphere_mqMatch5.3-express
OR
ibmwebsphere_mqMatch5.3.1
OR
ibmwebsphere_mqMatch6.0.0.0
OR
ibmwebsphere_mqMatch6.0.1.0
OR
ibmwebsphere_mqMatch6.0.1.1
OR
ibmwebsphere_mqMatch6.0.2.0
OR
ibmwebsphere_mqMatch6.0.2.1
OR
ibmwebsphere_mqMatch6.0.2.2
OR
ibmwebsphere_mqMatch6.0.2.3
OR
ibmwebsphere_mqMatch6.0.2.4
OR
ibmwebsphere_mqMatch7.0
OR
ibmwebsphere_mqMatch7.0.0.1

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2009-0439