CVE-2014-4793

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-02 · updated 2026-06-17
Weakness: CWE-264

Description

IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforce CHLAUTH rules for blocking client connections in certain circumstances related to the CONNAUTH attribute, which allows remote authenticated users to bypass intended queue-manager access restrictions via unspecified vectors.

Affected products

IBM Corporation WebSphere MQ: 8.0.0.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg21685526
https://exchange.xforce.ibmcloud.com/vulnerabilities/95208
http://www-01.ibm.com/support/docview.wss?uid=swg21685526
https://exchange.xforce.ibmcloud.com/vulnerabilities/95208

Get alerted when CVE-2014-4793 or the next vulnerability affects your stack