VULNERABILITY INTELLIGENCE
CVE-2009-0905
CVSS score1.7 LOW
EPSS probability0.24%
CISA KEVNot currently listed
Published2011-10-30
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:S/C:N/I:P/A:N
Description
IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial substring.
Weakness classification
- CWE-20: Improper Input Validation