CVE-2019-4078

IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrator due to incorrect…

High · published May 23, 2019

CVSS v3.0
7.4
EPSS
0%
Percentile
32.0
In the wild
Unconfirmed
What it is

IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrator due to incorrect permissions set on MQ installation directories. IBM X-Force ID: 157190.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/I:H/S:U/UI:N/C:H/A:H/AV:L/AC:H/PR:N/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00390 · 32.0th percentile
Published
2019-05-23T14:05Z
EPSS history
Timeline
  • 23 MAY 14:05Z
    IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrator due to incorrect…
    cvelistv5