{"id":"CVE-2018-1551","aliases":["EUVD-2018-12130","GHSA-62m7-f9pr-4678"],"status":"published","title":"IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have...","description":"IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888.","severity":{"version":"3.0","score":3.1,"vector":"CVSS:3.0/A:N/AC:H/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01138,"percentile":0.6679,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2018-08-06T14:00:00Z","modified":"2026-06-17T01:51:25Z","products":[{"vendor":"ibm","product":"websphere mq"},{"vendor":"ibm","product":"websphere_mq"}],"references":[{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10716113","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/142888","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105040","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1551"},{"url":"https://github.com/advisories/GHSA-62m7-f9pr-4678"}],"sources":{"cve":[{"id":"CVE-2018-1551","description":"IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888.","status":"published","published":"2018-08-06T14:00:00Z","modified":"2024-09-16T20:21:49.392Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/A:N/AC:H/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:35:09.139955Z"}],"euvd":[{"id":"EUVD-2018-12130","description":"IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888.","status":"published","published":"2018-08-06T14:00:00Z","modified":"2024-09-16T20:21:49Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/A:N/AC:H/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O","level":"low"}],"updated_at":"2026-11-03T00:55:14.527578Z"}],"ghsa":[{"id":"GHSA-62m7-f9pr-4678","title":"IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have...","description":"IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888.","status":"published","published":"2022-05-13T01:33:08Z","modified":"2023-02-01T05:08:18Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:50:44.010322Z"}],"nvd":[{"id":"CVE-2018-1551","description":"IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888.","status":"published","published":"2018-08-06T14:29:00.717Z","modified":"2026-06-17T01:51:25.2Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:04:35.310988Z"}]}}