CVE-2019-4078: High severity ibm websphere mq appliance vulnerability

Q: What is CVE-2019-4078?

CVE-2019-4078 is a vulnerability in IBM WebSphere MQ versions 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 that could allow a local non-privileged user to execute code as an administrator due to incorrect permissions.

Q: What is the severity of CVE-2019-4078?

CVE-2019-4078 has a severity rating of 7.8 out of 10.

Q: How does CVE-2019-4078 affect IBM WebSphere MQ?

CVE-2019-4078 affects IBM WebSphere MQ versions 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1.

Q: How can an attacker exploit CVE-2019-4078?

To exploit CVE-2019-4078, an attacker would need local access to the system and execute code with incorrect permissions.

Q: Is there a fix for CVE-2019-4078?

Yes, IBM has released fixes for CVE-2019-4078. Please refer to the IBM support page for more information.

Published May 23, 2019

Updated

IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrator due to incorrect permissions set on MQ installation directories. IBM X-Force ID: 157190.

Affected Software

4 affected components

IBM WebSphere MQ>=8.0.0.0<=8.0.0.11

IBM WebSphere MQ>=9.0.0.0<=9.0.0.5

IBM WebSphere MQ>=9.1.0.0<=9.1.0.1

IBM WebSphere MQ=9.1.1

Remediation

Patch Available

https://www.ibm.com/support/docview.wss?uid=ibm10872876

Event History

May 23, 2019

CVE Published

via MITRE·02:05 PM

Data Sourced

via MITRE·02:05 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-4078?

CVE-2019-4078 is a vulnerability in IBM WebSphere MQ versions 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 that could allow a local non-privileged user to execute code as an administrator due to incorrect permissions.

What is the severity of CVE-2019-4078?

CVE-2019-4078 has a severity rating of 7.8 out of 10.

How does CVE-2019-4078 affect IBM WebSphere MQ?