Lucene search
IBM1E0965980E883ED56184AA4C200A28AF4B25CB3C6365ECB8E1AAD40B034F4505HistoryDec 13, 2021 - 3:27 p.m.
Security Bulletin: IBM MQ for HP NonStop Server is affected by vulnerability CVE-2021-38950
2021-12-1315:27:13
www.ibm.com
7
0.0004 Low
EPSS
Percentile
12.6%
Summary
IBM MQ is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective. The issue is described by CVE-2021-38950.
Vulnerability Details
CVEID:CVE-2021-38950
**DESCRIPTION:**IBM MQ on HPE NonStop is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective.
CVSS Base score: 7.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/211404 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM MQ for HPE NonStop | 8.1.0 |
| IBM MQ for HPE NonStop | 8.0.4 |
Remediation/Fixes
| IBM MQ V8.1 for HPE NonStop | 8.1.0.9 | IT38634 | Upgrade to Fixpack 8.1.0.9 |
|---|
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm mq for hpe nonstop | eq | 8.1 | |
| ibm mq for hpe nonstop | eq | 8.1 |
Related
cve
cve
CVE-2021-38950
2021-12-14 17:15:06
prion
prion
Privilege escalation
2021-12-14 17:15:00
nvd
nvd
CVE-2021-38950
2021-12-14 17:15:06
cvelist
cvelist
CVE-2021-38950
2021-12-13 00:00:00
0.0004 Low
EPSS
Percentile
12.6%
Related for 1E0965980E883ED56184AA4C200A28AF4B25CB3C6365ECB8E1AAD40B034F4505