CVE-2021-38950

Name of the Vulnerable Software and Affected Versions IBM MQ on HPE NonStop versions 8.0.4 through 8.1.0

Description The issue is related to a privilege escalation attack when the SharedBindingsUserId is set to effective. This is due to weaknesses in the authentication procedure. Exploitation of this issue may allow an attacker to elevate their privileges.

Recommendations For IBM MQ on HPE NonStop versions 8.0.4 and 8.1.0, consider setting the SharedBindingsUserId to a value other than effective as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.