VULNERABILITY INTELLIGENCE

CVE-2011-1378

CVSS score1.9 LOW
EPSS probability0.28%
CISA KEVNot currently listed
Published2011-11-26
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:P

Description

IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.

Primary references