VULNERABILITY INTELLIGENCE

CVE-2015-7473

CVSS score2.5 LOW
EPSS probability0.28%
CISA KEVNot currently listed
Published2016-06-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restrictions by leveraging authority for +connect and +dsp.

Weakness classification

  • CWE-284: Improper Access Control

Primary references