Privilege Escalation Vulnerability in IBM MQ for HPE NonStop
CVE-2020-4352

4.9MEDIUM

Key Information:

Vendor

IBM
Status
MQ For HP Nonstop
Vendor
CVE Published:
29 May 2020

What is CVE-2020-4352?

IBM MQ running on HPE NonStop versions 8.0.4 and 8.1.0 can be exploited due to a privilege escalation vulnerability when operating in restricted mode. This flaw allows an attacker to gain elevated permissions, potentially compromising the security of the system. Users are advised to implement the available patches and mitigation strategies to safeguard their installations against potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

MQ for HPE NonStop 8.1.0

MQ for HPE NonStop 8.0.4

References

https://www.ibm.com/support/pages/node/6217600
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/178427
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.