CVE-2014-4793

IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client connections in certain circumstances related to the CONNAUTH attribute, which allows remote authenticated users to bypass intended queue-manager access restrictions via unspecified vectors.

Score

CVSS 2.0 6.5 Medium

Status

Modified - psirt@us.ibm.com

Published

2014-10-02

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Websphere Mq (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21685526
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95208