Description
MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."
References (5)
Core 5
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29360
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0869
Patch x_refsource_confirm
http://www-1.ibm.com/support/docview.wss?uid=swg21297035
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1019610
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/28235
Scores
EPSS
0.0038
EPSS Percentile
30.9%
Details
CWE
CWE-264
Status
published
Products (3)
ibm/websphere_mq
5.1
ibm/websphere_mq
5.3
ibm/websphere_mq
5.3.1
Published
Mar 31, 2008
Tracked Since
Feb 18, 2026