PT-2021-5338
CVE-2021-38950
·
تاريخ النشر
2021-12-13
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM MQ on HPE NonStop versions 8.0.4 through 8.1.0
Description
The issue is related to a privilege escalation attack when the
SharedBindingsUserId is set to effective. This is due to weaknesses in the authentication procedure. Exploitation of this issue may allow an attacker to elevate their privileges.Recommendations
For IBM MQ on HPE NonStop versions 8.0.4 and 8.1.0, consider setting the
SharedBindingsUserId to a value other than effective as a temporary workaround to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾