Lucene search
IBME4C31E52ED83DF6DE74833C6C6F8D4A6D87B40D7AD2EF2A1899248F3D7264418HistoryJun 01, 2020 - 4:28 p.m.
Security Bulletin: IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4352
2020-06-0116:28:10
www.ibm.com
2
0.0004 Low
EPSS
Percentile
12.6%
Summary
IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4352.
Vulnerability Details
CVEID:CVE-2020-4352
**DESCRIPTION:**IBM MQ on HPE NonStop is vulnerable to a privilege escalation attack when running in restricted mode.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/178427 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM MQ for HPE NonStop | 8.1.0 |
| IBM MQ for HPE NonStop | 8.0.4 |
Remediation/Fixes
| IBM MQ V8 for HPE NonStop | 8.1.0.4 | IT31836 | Install Fixpack 8.1.0.4 |
|---|
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm mq for hpe nonstop | eq | 8.1 |
Related
cve
cve
CVE-2020-4352
2020-05-29 13:15:09
cvelist
cvelist
CVE-2020-4352
2020-05-28 00:00:00
nvd
nvd
CVE-2020-4352
2020-05-29 13:15:09
prion
prion
Privilege escalation
2020-05-29 13:15:00
0.0004 Low
EPSS
Percentile
12.6%
Related for E4C31E52ED83DF6DE74833C6C6F8D4A6D87B40D7AD2EF2A1899248F3D7264418