CVE-2011-1378 | BDVDB-2026-48285 Detail

Description#

IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/46837
https://exchange.xforce.ibmcloud.com/vulnerabilities/71336
http://www-01.ibm.com/support/docview.wss?uid=swg1IC78034

Exploit#

No public exploit known

History#

Version 12011-11-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.