Security Bulletin: IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4352

Summary IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4352. Vulnerability Details CVEID: CVE-2020-4352 DESCRIPTION: IBM MQ on HPE NonStop is vulnerable to a privilege escalation attack when running in restricted mode. CVSS Base score: 4.9 CVSS Temporal Score: See:...

CVE-2020-4352

The IBM bulletin confirms CVE-2020-4352 affects IBM MQ for HPE NonStop Server versions 8.0.4 and 8.1.0, enabling privilege escalation when running in restricted mode. Root cause details are not disclosed in the provided documents, but remediation is available: install Fixpack 8.1.0.4 (IT31836) fo...