Lucene search

IBM42B7E245A5D04016321D82613C7250A94D3D922AF7A267C62D8B8B4017DA460F

HistoryOct 31, 2023 - 3:02 p.m.

Security Bulletin: IBM MQ Appliance could allow a local attacker to gain elevated privileges on the system

2023-10-3115:02:00

www.ibm.com

ibm mq appliance

local attacker

elevated privileges

security keys

apar it44672

version 9.3 cd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

Percentile

5.1%

JSON

Summary

IBM MQ Appliance has resolved an elevated privileges vulnerability.

Vulnerability Details

CVEID:CVE-2023-46176
**DESCRIPTION:**IBM MQ Appliance could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys.
CVSS Base score: 6.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/269535 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

Affected Product(s)	Version(s)
IBM MQ Appliance	9.3 CD

Remediation/Fixes

This vulnerability is addressed under APAR IT44672

IBM strongly recommends addressing the vulnerability now.

IBM MQ Appliance version 9.3 CD

Apply IBM MQ Appliance 9.3.4 CD release, or later firmware.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmmq_applianceMatch9.3.3.0

ibmmq_applianceMatch9.3.3.1

VendorProductVersionCPE
ibmmq_appliance9.3.3.0cpe:2.3:a:ibm:mq_appliance:9.3.3.0:*:*:*:*:*:*:*
ibmmq_appliance9.3.3.1cpe:2.3:a:ibm:mq_appliance:9.3.3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	mq_appliance	9.3.3.0	cpe:2.3:a:ibm:mq_appliance:9.3.3.0:::::::*
ibm	mq_appliance	9.3.3.1	cpe:2.3:a:ibm:mq_appliance:9.3.3.1:::::::*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for 42B7E245A5D04016321D82613C7250A94D3D922AF7A267C62D8B8B4017DA460F