CVE-2011-1378: IBM WebSphere Mq

Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.

Affected products

• IBM WebSphere Mq: version 6.0 only

Published 2011-11-26. Last modified 2026-06-16.