Lucene search
HistoryNov 26, 2011 - 3:57 a.m.
CVE-2011-1378
ibm
websphere
mq
openvms
local users
security vulnerability
cve-2011-1378
nvd
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.
Affected configurations
Node
ibmwebsphere_mqMatch6.0
hpopenvms
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:websphere_mq | ibm websphere mq | eq | 6.0 |
Related
cvelist
cvelist
CVE-2011-1378
2011-11-26 02:00:00
prion
prion
Command injection
2011-11-26 03:57:00
nvd
nvd
CVE-2011-1378
2011-11-26 03:57:45
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:N/A:P
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2011-1378