CVE-2019-4620

Tuesday, January 28, 2020

8.4

CVSS:3.0/S:U/A:H/I:H/AC:L/AV:L/C:H/UI:N/PR:N/RC:C/E:U/RL:O

Summary

IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validation of environment variables. IBM X-Force ID: 168863.

Affected Software

Vendor	Product	Version Range	Status
IBM	MQ Appliance	`8.0.0.3`	affected
IBM	MQ Appliance	`8.0.0.4`	affected
IBM	MQ Appliance	`8.0.0.5`	affected
IBM	MQ Appliance	`8.0.0.6`	affected
IBM	MQ Appliance	`8.0.0.0`	affected
IBM	MQ Appliance	`8.0.0.10`	affected
IBM	MQ Appliance	`8.0.0.11`	affected
IBM	MQ Appliance	`9.1.0.1`	affected
IBM	MQ Appliance	`9.1.1`	affected
IBM	MQ Appliance	`8.0.0.1`	affected
IBM	MQ Appliance	`8.0.0.7`	affected
IBM	MQ Appliance	`8.0.0.9`	affected
IBM	MQ Appliance	`8.0.0.12`	affected
IBM	MQ Appliance	`9.1.0.2`	affected
IBM	MQ Appliance	`9.1.2`	affected
IBM	MQ Appliance	`9.1.0.3`	affected
IBM	MQ Appliance	`9.1.3`	affected
IBM	MQ Appliance	`9.1`	affected
IBM	MQ Appliance	`8.0.0.13`	affected

Weaknesses

Bypass Security

ADP Enrichment

CVE Program Container

Additional References

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.