PT-2017-8886 · Ibm · Websphere Mq

Published 2017-06-07 · Updated 2017-06-12 · CVE-2016-6089

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 9.0.0.1 through 9.0.2

Description The issue is related to improper access controls, allowing a local user to write to a file or delete files in a directory they should not have access to.

Recommendations For versions 9.0.0.1 and 9.0.2, update access controls to properly restrict file and directory access to authorized users.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-6089

Affected Products

Websphere Mq

References · 5

• https://osv.dev/vulnerability/CVE-2016-6089 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=swg22003509 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/117926 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6089 · Security Note
• http://securityfocus.com/bid/98770 · Note