Local Code Execution Vulnerability in IBM MQ Appliance
CVE-2021-38967

8.2HIGH

Key Information:

Vendor

IBM
Status
MQ Appliance
Vendor
CVE Published:
30 November 2021

What is CVE-2021-38967?

A local code execution vulnerability exists in IBM MQ Appliance versions 9.2 CD and 9.2 LTS, enabling a local privileged user to execute unauthorized commands by injecting malicious code. Successful exploitation could lead to unauthorized access to sensitive operations and data. Secure your systems by updating to the latest available version.

Affected Version(s)

MQ Appliance 9.2.0.0

MQ Appliance 9.2.1

MQ Appliance 9.2.0.1

References

https://www.ibm.com/support/pages/node/6512826
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/212441
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.