CVE-2008-1592

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-03-31 · updated 2026-06-16
Weakness: CWE-264

Description

MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."

Affected products

IBM Corporation WebSphere MQ: 5.1, 5.3, 5.3.1

References

http://secunia.com/advisories/29360
http://securitytracker.com/id?1019610
http://www-1.ibm.com/support/docview.wss?uid=swg21297035
http://www.securityfocus.com/bid/28235
http://www.vupen.com/english/advisories/2008/0869
http://secunia.com/advisories/29360
http://securitytracker.com/id?1019610
http://www-1.ibm.com/support/docview.wss?uid=swg21297035
http://www.securityfocus.com/bid/28235
http://www.vupen.com/english/advisories/2008/0869

Get alerted when CVE-2008-1592 or the next vulnerability affects your stack