Skip to content
OpenAdvisories
Unscored CVE-2009-0905 EUVD-2009-0902GHSA-8fg6-6hjr-4whj

IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain…

Published Oct 30, 2011 · Updated Aug 7, 2024 · Assigned by mitre

Description

IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial substring.

References