CVE-2016-0259 - runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp authority requirement and obtain sensitive information via unspecified display commands

Back Back to CVE browser

LOW

runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp authority requirement and obtain sensitive information via unspecified display commands

Published Jun 26, 2016

2.5

LOW

CVSS 3.0

EPSS 0.29%

Description

runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp authority requirement and obtain sensitive information via unspecified display commands.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

http://www-01.ibm.com/support/docview.wss?uid=swg21984561
x_refsource_CONFIRMVendor Advisory
http://www.securitytracker.com/id/1036179
vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-0294
Advisory

Link	Providers	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg21984561		x_refsource_CONFIRMVendor Advisory
http://www.securitytracker.com/id/1036179		vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-0294		Advisory