CVE-2021-38950

IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective

High · published December 14, 2021

CVSS v3.0
7.4
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective. IBM X-ForceID: 211404.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/PR:N/AC:H/C:H/S:U/I:H/AV:L/A:H/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Published
2021-12-14T16:20Z
EPSS history
Timeline
  • 14 DEC 16:20Z
    IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective
    cvelistv5