Security Bulletin: IBM MQ Appliance potential execution of arbitrary commands (CVE-2016-5879)

Summary There is potential for malicious users to execute arbitrary commands due to improper validation of the input parameters. Vulnerability Details CVEID: CVE-2016-5879 DESCRIPTION: IBM MQ Appliance could allow a local attacker to execute arbitrary commands on the system, caused by improper...

CVE-2016-5879

IBM MQ Appliance (M2000 and M2001) is affected by CVE-2016-5879 where MQCLI input to Disaster Recovery and High Availability commands is improperly validated, enabling a local attacker to inject and execute arbitrary shell commands. Impact is local, with potential for full command execution and d...

CVE-2016-5879

MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted 1 Disaster Recovery or 2 High Availability command...