Various display commands via local runmqsc return data for non-privileged users where they lack appropriate +dsp authority. The problem does not affect remotely connected runmqsc.
CVE(s): CVE-2016-0259
Affected product(s) and affected version(s):
IBM WebSphere MQ 8.0.0.0 through 8.0.0.4 maintenance levels
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1Xx7QAY
X-Force Database: http://ift.tt/1r9OW4C
from IBM Product Security Incident Response Team http://ift.tt/1Xx8azT
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.