| Package | Affected versions | Patched versions |
|---|---|---|
| integration bus | = 9.0= 9.0.0.1= 9.0.0.2= 9.0.0.3 | |
| websphere message broker | = 8.0= 8.0.0.1= 8.0.0.2= 8.0.0.3= 8.0.0.4= 8.0.0.5 |
IBM WebSphere Message Broker 8 before 8.0.0.6 and Integration Bus 9 before 9.0.0.4 do not check authorization for MQSISTARTMSGFLOW and MQSISTOPMSGFLOW commands, which allows local users to bypass intended access restrictions, and start or stop a service, by issuing a command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free