PT-2019-16887 · Ibm · Ibm Websphere Mq

Publicado 2019-05-23 · Atualizado 2022-12-09 · CVE-2019-4078

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 8.0.0.0 through 8.0.0.9 IBM WebSphere MQ versions 9.0.0.0 through 9.1.1

Description The issue allows a local non-privileged user to execute code as an administrator due to incorrect permissions set on MQ installation directories.

Recommendations For IBM WebSphere MQ versions 8.0.0.0 through 8.0.0.9, update the permissions on MQ installation directories to prevent local non-privileged users from executing code as an administrator. For IBM WebSphere MQ versions 9.0.0.0 through 9.1.1, update the permissions on MQ installation directories to prevent local non-privileged users from executing code as an administrator.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2019-4078

Produtos afetados

Ibm Websphere Mq

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-4078 · Aviso do Fabricante
• https://ibm.com/support/docview.wss?uid=ibm10872876 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4078 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/157190 · Aviso do Fabricante