CVEvulnerability
CVE-2008-1592
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-03-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."
Affected configurations
• ibm websphere mq 5.1
• ibm websphere mq 5.3
• ibm websphere mq 5.3.1
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/29360 secunia.com
- http://securitytracker.com/id?1019610 securitytracker.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21297035 Patch
- http://www.securityfocus.com/bid/28235 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0869 www.vupen.com
- http://secunia.com/advisories/29360 secunia.com
- http://securitytracker.com/id?1019610 securitytracker.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21297035 Patch
- http://www.securityfocus.com/bid/28235 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0869 www.vupen.com