IBM Security Bulletin: IBM MQ could allow a local user to inject code that could be executed with root privileges. (CVE-2018-1998)

IBM MQ could allow a local user to inject code that could be executed with root privileges. This is due to an incomplete fix for CVE-2018-1792.

CVE(s): CVE-2018-1998

Affected product(s) and affected version(s):
IBM MQ V8 versions 8.0.0.0 – 8.0.0.10
IBM MQ V9 LTS versions 9.0.0.0 – 9.0.0.5
IBM MQ V9.1 LTS versions 9.1.0.0 – 9.1.0.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10870488
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/154887

The post IBM Security Bulletin: IBM MQ could allow a local user to inject code that could be executed with root privileges. (CVE-2018-1998) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2TFrYoA