Описание
IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client connections in certain circumstances related to the CONNAUTH attribute, which allows remote authenticated users to bypass intended queue-manager access restrictions via unspecified vectors.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ibm:websphere_mq:8.0.0.0:*:*:*:*:*:*:*
EPSS
Процентиль: 41%
0.00191
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client connections in certain circumstances related to the CONNAUTH attribute, which allows remote authenticated users to bypass intended queue-manager access restrictions via unspecified vectors.
EPSS
Процентиль: 41%
0.00191
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-264