CVE-2021-38950: IBM Mq For HPE Nonstop

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to effective. IBM X-ForceID: 211404.

Affected products

  • IBM Mq For HPE Nonstop: version 8.0.4 only; version 8.1.0 only

Published 2021-12-14. Last modified 2026-06-17.