CVE-2024-31912CWE-266

IBM MQ privilege escalation

High · published June 28, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations due to incorrect privilege assignment. IBM X-Force ID: 289894.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00424 · 35.6th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2024-06-28T17:38Z
EPSS history
Timeline
  • 28 JUN 17:38Z
    IBM MQ privilege escalation
    cvelistv5