← Back

CVE-2008-1592

nvd nist
Published: Mar 31, 2008Modified: Apr 23, 2026

JSON object

Loading...
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD

Description

MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."

Affected (3)

Products: Ibm: Websphere Mq
Ibm
1 product
Websphere Mq
Configuration A
3 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Ibm
Websphere Mq
Version 5.1
Websphere Mq
Version 5.3.1
Websphere Mq
Version 5.3
Running on/withPlatform Versions
Hp
Nonstop
All versions
Tandem Computers
Tandem Operating System
Version nsk

Related CWEs

CWE-264
CWE-264

References (10)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.