Description
Unspecified vulnerability in the queue manager in IBM WebSphere MQ (WMQ) 5.3, 6.0 before 6.0.2.6, and 7.0 before 7.0.0.2 allows local users to gain privileges via vectors related to the (1) setmqaut, (2) dmpmqaut, and (3) dspmqaut authorization commands.
References (6)
Core 6
Core References
Patch x_refsource_misc
http://www-01.ibm.com/support/docview.wss?rs=171&uid=swg27006037
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/33857
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/52297
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34034
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/48529
Various Sources vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ40824
Scores
EPSS
0.0037
EPSS Percentile
29.8%
Details
CWE
CWE-264
Status
published
Products (12)
ibm/websphere_mq
5.3 (2 CPE variants)
ibm/websphere_mq
5.3.1
ibm/websphere_mq
6.0.0.0
ibm/websphere_mq
6.0.1.0
ibm/websphere_mq
6.0.1.1
ibm/websphere_mq
6.0.2.0
ibm/websphere_mq
6.0.2.1
ibm/websphere_mq
6.0.2.2
ibm/websphere_mq
6.0.2.3
ibm/websphere_mq
6.0.2.4
... and 2 more
Published
Feb 24, 2009
Tracked Since
Feb 18, 2026