Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local user to inject code that could be executed with root privileges. IBM X-Force ID: 148947.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
8.8HIGH3.0CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:L/S:C/UI:N/E:U/RC:C/RL:O

Product Status

Learn more

Versions 23 Total

Default Status: unknown

affected

  • affected at 9.0.1 
  • affected at 9.0.0.1 
  • affected at 9.0.2 
  • affected at 8.0.0.1 
  • affected at 8.0.0.2 
  • affected at 8.0.0.3 
  • affected at 8.0.0.4 
  • affected at 8.0.0.5 
  • affected at 8.0.0.6 
  • affected at 8.0.0.7 
  • affected at 9.0.0.2 
  • affected at 9.0.3 
  • affected at 9.0.4 
  • affected at 8.0.0.8 
  • affected at 8.0.0.9 
  • affected at 9.0.0.3 
  • affected at 8.0.0.0 
  • affected at 8.0.0.10 
  • affected at 9.0.0.0 
  • affected at 9.0.0.4 
  • affected at 9.0.0.5 
  • affected at 9.0.5 
  • affected at 9.1.0.0 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.