CVE-2009-0905 - IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial substring

Back Back to CVE browser

LOW

IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial substring

Published Oct 30, 2011

1.7

LOW

CVSS 2.0

EPSS 0.24%

Description

IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial substring.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

http://www.ibm.com/support/docview.wss?uid=swg1IZ37102
vendor-advisoryx_refsource_AIXAPAR
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0902
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51042
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.ibm.com/support/docview.wss?uid=swg1IZ37102		vendor-advisoryx_refsource_AIXAPAR
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0902		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51042		vdb-entryx_refsource_XF