Vulnerability in Ibm Mq For Hpe Nonstop

CVE-2020-4352

IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427.

EPSS: 0.001 (17.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.0/UI:N/S:U/AV:L/PR:N/A:L/AC:H/C:L/I:L/RC:C/RL:O/E:U.

Affected products

Ibm Mq For Hpe Nonstop — versions 8.1.0, 8.0.4

References

www.ibm.com/support/pages/node/6217600 (x_refsource_CONFIRM)
ibm-mq-cve20204352-priv-escalation (178427) (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2020-4352?: CVE-2020-4352 is a medium-severity vulnerability in Ibm Mq For Hpe Nonstop. CVSS score: 4.9/10. Published 2020-05-29.
How severe is CVE-2020-4352?: Medium severity. CVSS v3 base score is 4.9 out of 10.