Security Bulletin: IBM WebSphere MQ Improper access control for some display commands in local runmqsc (CVE-2016-0259)

Summary Various display commands via local runmqsc return data for non-privileged users where they lack appropriate +dsp authority. The problem does not affect remotely connected runmqsc. Vulnerability Details CVEID: CVE-2016-0259 DESCRIPTION: IBM WebSphere MQ could allow a local user with...

CVE-2016-0259

IBM WebSphere MQ 8.x is affected by CVE-2016-0259 where a local user can bypass the +dsp authority and view sensitive information via certain local runmqsc display commands. Affected products are IBM WebSphere MQ 8.0.0.0 through 8.0.0.4; remediation is to apply IBM WebSphere MQ 8.0.0.5 Fixpack or...