CVE-2011-1378

EUVD-2011-1385
IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
1.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
Affected Products (NVD)
VendorProductVersion
ibmwebsphere_mq
6.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/46837
http://www-01.ibm.com/support/docview.wss?uid=swg1IC78034
https://exchange.xforce.ibmcloud.com/vulnerabilities/71336
http://secunia.com/advisories/46837
http://www-01.ibm.com/support/docview.wss?uid=swg1IC78034
https://exchange.xforce.ibmcloud.com/vulnerabilities/71336