CVE-2008-1592
Last modified
CVE-2008-1592 is a vulnerability of currently unknown severity. MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels.". EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Websphere Mq | 5.1 |
| Ibm | Websphere Mq | 5.3 |
| Ibm | Websphere Mq | 5.3.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-1592?
How severe is CVE-2008-1592?
How do I fix CVE-2008-1592?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-1585Apple QuickTime before 7.5 uses the url.dll!FileProtocolHand…
- CVE-2008-1586ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for…
- CVE-2008-1588Safari on Apple iPhone before 2.0 and iPod touch before 2.0 …
- CVE-2008-1589Safari on Apple iPhone before 2.0 and iPod touch before 2.0 …
- CVE-2008-1590JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod…
- CVE-2008-1591The pnVarPrepForStore function in PostNuke 0.764 and earlier…
- CVE-2008-1593The checkpoint and restart feature in the kernel in IBM AIX …
- CVE-2008-1594The kernel in IBM AIX 5.2 and 5.3 does not properly handle r…
- CVE-2008-1595The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 doe…
- CVE-2008-1596Trusted Execution in IBM AIX 6.1 uses an incorrect pathname …
- CVE-2008-1597The WPAR system call implementation in the kernel in IBM AIX…
- CVE-2008-1598The kernel in IBM AIX 6.1 allows local users with ProbeVue p…
Are you affected by CVE-2008-1592?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST