PT-2021-5338 · Ibm · Ibm Mq

Published 2021-12-13 · Updated 2022-07-12 · CVE-2021-38950

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ on HPE NonStop versions 8.0.4 through 8.1.0

Description The issue is related to a privilege escalation attack when the SharedBindingsUserId is set to effective. This is due to weaknesses in the authentication procedure. Exploitation of this issue may allow an attacker to elevate their privileges.

Recommendations For IBM MQ on HPE NonStop versions 8.0.4 and 8.1.0, consider setting the SharedBindingsUserId to a value other than effective as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2021-06167

CVE-2021-38950

Affected Products

Ibm Mq

References · 6

• https://osv.dev/vulnerability/CVE-2021-38950 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38950 · Security Note
• https://ibm.com/support/pages/node/6525810 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/211404 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-06167 · Security Note
• https://t.me/cibsecurity/33955 · Telegram Post