CVE-2015-7473

runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restrictions by leveraging authority for +connect and +dsp...

CVE-2015-7473

CVE-2015-7473 affects IBM WebSphere MQ 8.0.0.0–8.0.0.4, where runmqsc on a locally connected queue manager can bypass queue-manager command access restrictions by abusing +connect and +dsp privileges. The root cause is improper access control for certain local MQSC commands, allowing a user with ...