CVEvulnerability
CVE-2011-1378
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2011-11-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-264
Description
IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.
Affected configurations
• ibm websphere mq 6.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/46837 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC78034 www-01.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71336 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/46837 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC78034 www-01.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71336 exchange.xforce.ibmcloud.com