3.1
Low
CVE-2018-1551 IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than…
Description
IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere MQ 9.0 | 9.0.0.0 → 9.0.0.3 | No fix stated |
| WebSphere MQ 8.0 | 8.0.0.2 → 8.0.0.8 | No fix stated |
Other CVEs of WebSphere MQ
The 8 CVEs of WebSphere MQ →
CVE-2020-4310
IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to…
5.9
Medium
CVE-2012-4863
IBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulnerability
Not rated
CVE-2018-1503
IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed headers…
4.3
Medium
CVE-2017-1795
IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via…
4.4
Medium