CVE-2011-1378: Low severity ibm websphere mq appliance vulnerability
IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1378?
CVE-2011-1378 is considered a medium severity vulnerability due to its potential to allow local users to manipulate critical processes.
How do I fix CVE-2011-1378?
To fix CVE-2011-1378, ensure proper user rights and access controls are implemented for the MQM group in IBM WebSphere MQ 6.0.
What products are affected by CVE-2011-1378?
CVE-2011-1378 specifically affects IBM WebSphere MQ version 6.0 running on HP OpenVMS.
Can CVE-2011-1378 be exploited remotely?
No, CVE-2011-1378 can only be exploited locally by users who have access to the system.
What is the impact of CVE-2011-1378 on the system?
Exploitation of CVE-2011-1378 allows local users to terminate essential listener processes and the command server, potentially disrupting service.