CVE-2020-4352 : IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation at

IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427.

Published 2020-05-29 13:15:10

Updated 2021-07-21 11:39:24

Source IBM Corporation

View at NVD, CVE.org

Vulnerability category: Gain privilege

Products affected by CVE-2020-4352

IBM » Mq For Hpe Nonstop » Version: 8.0.4
cpe:2.3:a:ibm:mq_for_hpe_nonstop:8.0.4:*:*:*:*:*:*:*
Matching versions
IBM » Mq For Hpe Nonstop » Version: 8.1.0
cpe:2.3:a:ibm:mq_for_hpe_nonstop:8.1.0:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.4	MEDIUM	AV:L/AC:M/Au:N/C:P/I:P/A:P	3.4	6.4	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
4.9	MEDIUM	CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L	1.4	3.4	IBM Corporation
Attack Vector: Local Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: Low
7.0	HIGH	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	1.0	5.9	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

https://exchange.xforce.ibmcloud.com/vulnerabilities/178427

IBM MQ on HPE NonStop privilege escalation CVE-2020-4352 Vulnerability Report
VDB Entry;Vendor Advisory
https://www.ibm.com/support/pages/node/6217600

Security Bulletin: IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4352
Vendor Advisory

Jump to