CVE-2018-1998

Description

IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges. This is due to an incomplete fix for CVE-2018-1792. IBM X-ForceID: 154887.

Reserved 2017-12-13 | Published 2019-03-11 | Updated 2024-09-17 | Assigner ibm

Problem types

Gain Privileges

Product status

9.0.0.1
affected

8.0.0.1
affected

8.0.0.2
affected

8.0.0.3
affected

8.0.0.4
affected

8.0.0.5
affected

8.0.0.6
affected

8.0.0.7
affected

9.0.0.2
affected

8.0.0.8
affected

8.0.0.9
affected

9.0.0.3
affected

8.0.0.0
affected

8.0.0.10
affected

9.0.0.0
affected

9.0.0.4
affected

9.0.0.5
affected

9.1.1
affected

References

exchange.xforce.ibmcloud.com/vulnerabilities/154887 (ibm-websphere-cve20181998-priv-escalation(154887)) vdb-entry

www.ibm.com/support/docview.wss?uid=ibm10870488

cve.org (CVE-2018-1998)

nvd.nist.gov (CVE-2018-1998)

Download JSON