CVE-2011-1378

Published: Nov 26, 2011Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.

Affected (1)

Products: Ibm: Websphere Mq

Ibm

1 product

Websphere Mq

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Websphere Mq	Version 6.0

Running on/with	Platform Versions
Hp Openvms	All versions

Related CWEs

CWE-264

References (6)

http://secunia.com/advisories/46837

Source: cve@mitre.org

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IC78034

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/71336

Source: cve@mitre.org

http://secunia.com/advisories/46837

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IC78034

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/71336

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.