CVE-2014-4793: Medium severity ibm websphere mq appliance vulnerability
IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client connections in certain circumstances related to the CONNAUTH attribute, which allows remote authenticated users to bypass intended queue-manager access restrictions via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4793?
CVE-2014-4793 is rated as a significant vulnerability due to its potential to allow unauthorized access to IBM WebSphere MQ systems.
How do I fix CVE-2014-4793?
To fix CVE-2014-4793, upgrade IBM WebSphere MQ to version 8.0.0.1 or later where the vulnerability is addressed.
Who is affected by CVE-2014-4793?
CVE-2014-4793 affects users of IBM WebSphere MQ version 8.0.0.0 who have not updated to the patched version.
What is the impact of CVE-2014-4793?
The impact of CVE-2014-4793 includes the potential for remote authenticated users to bypass access restrictions on queue managers.
Is there a workaround for CVE-2014-4793?
There are no official workarounds for CVE-2014-4793; the recommended action is to apply the security update.