CVE-2016-5879

MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted (1) Disaster Recovery or (2) High Availability command.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@us.ibm.com

Published

2016-09-02

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Mq Appliance Firmware (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT16174
• http://www-01.ibm.com/support/docview.wss?uid=swg21987697
• http://www.securityfocus.com/bid/92538