{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-03-11T00:00:00", "descriptions": [{"lang": "en", "value": "MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to \"Pathway panels.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2009-02-26T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "29360", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/29360"}, {"name": "ADV-2008-0869", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/0869"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21297035"}, {"name": "1019610", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1019610"}, {"name": "28235", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/28235"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-1592", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to \"Pathway panels.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "29360", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29360"}, {"name": "ADV-2008-0869", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/0869"}, {"name": "http://www-1.ibm.com/support/docview.wss?uid=swg21297035", "refsource": "CONFIRM", "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21297035"}, {"name": "1019610", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1019610"}, {"name": "28235", "refsource": "BID", "url": "http://www.securityfocus.com/bid/28235"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-1592", "datePublished": "2008-03-31T23:00:00", "dateReserved": "2008-03-31T00:00:00", "dateUpdated": "2009-02-26T10:00:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hp:nonstop:*:*:*:*:*:*:*:*", "matchCriteriaId": "6018065D-F606-4769-9341-9E7DEA6A0A72", "vulnerable": false}, {"criteria": "cpe:2.3:o:tandem_computers:tandem_operating_system:nsk:*:*:*:*:*:*:*", "matchCriteriaId": "CE239FDD-F33C-4E9C-B864-BE3DCC78B59B", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_mq:5.1:*:*:*:*:*:*:*", "matchCriteriaId": "089EDD33-4854-4894-B88D-EC560C40E2EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:5.3:*:*:*:*:*:*:*", "matchCriteriaId": "36650BB9-861B-42B5-BCC1-492F84A64951", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:5.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "465D718A-ACA5-444B-99EE-67876B8D3687", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to \"Pathway panels.\""}, {"lang": "es", "value": "MQSeries 5.1 en IBM WebSphere MQ de 5.1 a 5.3.1 en las plataformas HP NonStop y Tandem NSK no requiere que se sea del grupo mqm para la ejecuci\u00f3n de tareas administrativas, lo que permite a usuarios locales evitar las restricciones de acceso pervistas a trav\u00e9s del programa runmqsc, relacionado con \"paneles Pathway\"."}], "id": "CVE-2008-1592", "lastModified": "2011-03-08T03:07:19.563", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-03-31T23:44:00.000", "references": [{"source": "cve@mitre.org", "url": "http://secunia.com/advisories/29360"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1019610"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www-1.ibm.com/support/docview.wss?uid=swg21297035"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/28235"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/0869"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}