CVEvulnerability
CVE-2016-0375
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-07-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2.0.0.0 allows remote authenticated users to obtain administrator privileges for executing arbitrary commands via unspecified vectors.
Affected configurations
• ibm messagesight 1.1.0.0
• ibm messagesight 1.1.0.1
• ibm messagesight 1.2
• ibm messagesight 1.2.0.0
• ibm messagesight 1.2.0.1
• ibm messagesight 1.2.0.2
• ibm messagesight 1.2.0.3
• ibm messagesight 2.0.0.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT15674 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT15743 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21985064 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT15674 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT15743 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21985064 Vendor Advisory