PT-2009-3093 · Ibm · Ibm Websphere Mq

Publicado 2009-02-24 · Atualizado 2017-08-08 · CVE-2009-0439

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 5.3, 6.0 through 6.0.2.5, 7.0 through 7.0.0.1

Description The issue allows local users to gain privileges via vectors related to the (1) setmqaut, (2) dmpmqaut, and (3) dspmqaut authorization commands.

Recommendations For IBM WebSphere MQ version 5.3, update to a version that is not affected by this issue. For IBM WebSphere MQ version 6.0, update to version 6.0.2.6 or later. For IBM WebSphere MQ version 7.0, update to version 7.0.0.2 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-0439

Produtos afetados

Ibm Websphere Mq

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2009-0439 · Nota de Segurança
• http://securityfocus.com/bid/33857 · Nota
• http://www-01.ibm.com/support/docview.wss?rs=171&uid=swg27006037 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48529 · Nota
• http://secunia.com/advisories/34034 · Nota
• http://osvdb.org/52297 · Nota
• http://www-1.ibm.com/support/docview.wss?uid=swg1IZ40824 · Aviso do Fabricante