ByteOS Network

NVD Vulnerability Details :

CVE-2011-1378

Modified

Source-cve@mitre.org

Published At-26 Nov, 2011 | 03:57

Updated At-29 Apr, 2026 | 01:13

IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	1.9	LOW	AV:L/AC:M/Au:N/C:N/I:N/A:P

Type: Primary

Version: 2.0

Base score: 1.9

Base severity: LOW

Vector:

AV:L/AC:M/Au:N/C:N/I:N/A:P

CPE Matches

IBM Corporation

>>websphere_mq>>6.0

cpe:2.3:a:ibm:websphere_mq:6.0:*:*:*:*:*:*:*

HP Inc.

>>openvms>>*

cpe:2.3:o:hp:openvms:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/46837	cve@mitre.org	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IC78034	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/71336	cve@mitre.org	N/A
http://secunia.com/advisories/46837	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IC78034	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/71336	af854a3a-2127-422b-91ae-364da2661108	N/A