VIR Vulnerability Intelligence Relay

CVE-2016-0259

low
Published 2016-06-26 · Modified 2026-05-06
CVSS v3
2.5
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v2
2.1
VIR risk
2.5

Description

runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp authority requirement and obtain sensitive information via unspecified display commands.

Predictions

Exploit likelihood
27%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21984561

Application impact
VendorProductVersionsFixed
ibmwebsphere_mq8.0.0.1
ibmwebsphere_mq8.0.0.2
ibmwebsphere_mq8.0.0.3
ibmwebsphere_mq8.0.0.4

References

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.