4.6

CVE-2008-1592

MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Websphere Mq Version5.1
   Hp ≫ Nonstop
   Tandem Computers ≫ Tandem Operating System Versionnsk
Ibm ≫ Websphere Mq Version5.3
   Hp ≫ Nonstop
   Tandem Computers ≫ Tandem Operating System Versionnsk
Ibm ≫ Websphere Mq Version5.3.1
   Hp ≫ Nonstop
   Tandem Computers ≫ Tandem Operating System Versionnsk
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.168
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P