PT-2017-8886 · Ibm · Websphere Mq

Publicado 2017-06-07 · Atualizado 2017-06-12 · CVE-2016-6089

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 9.0.0.1 through 9.0.2

Description The issue is related to improper access controls, allowing a local user to write to a file or delete files in a directory they should not have access to.

Recommendations For versions 9.0.0.1 and 9.0.2, update access controls to properly restrict file and directory access to authorized users.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-6089

Produtos afetados

Websphere Mq

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-6089 · Aviso do Fabricante
• http://securityfocus.com/bid/98770 · Nota
• http://ibm.com/support/docview.wss?uid=swg22003509 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/117926 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6089 · Nota de Segurança