CVE-2018-1998

IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges. This is due to an incomplete fix for CVE-2018-1792. IBM X-ForceID: 154887.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@us.ibm.com

Published

2019-03-11

Last modified

2024-09-17

Weaknesses

CWE-78

Affected products

• Mq (Ibm)
• Websphere Mq (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/154887
• https://www.ibm.com/support/docview.wss?uid=ibm10870488