CVE PROGRAM SOURCE RECORD7.4 High

CVE-2021-38950

IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective. IBM X-ForceID: 211404.

Status: Published
Published: 2021-12-14
Updated: 2024-09-16
Assigning organization: ibm

Description

IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective. IBM X-ForceID: 211404.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM MQ for HPE NonStop

8.1.0affected
8.0.4affected

References

https://www.ibm.com/support/pages/node/6525810 ↗
https://exchange.xforce.ibmcloud.com/vulnerabilities/211404 ↗