CVE-2019-4078: IBM WebSphere Mq

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrator due to incorrect permissions set on MQ installation directories. IBM X-Force ID: 157190.

Affected products

• IBM WebSphere Mq: from 8.0.0.0, up to and including 8.0.0.11; from 9.0.0.0, up to and including 9.0.0.5; from 9.1.0.0, up to and including 9.1.0.1; version 9.1.1 only

Published 2019-05-23. Last modified 2026-06-17.