CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 3.3
CWE Name:  Permissions Privileges and Access Controls
Summary: the websphere mq xa 5.3 before fp13 and 6.0.x before 6.0.2.1 client for windows, when running in an mts or a com+ environment, grants the process_dup_handle privilege to the everyone group upon connection to a queue manager, which allows local users to duplicate an arbitrary handle and possibly hijack an arbitrary process.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/PARTIAL
Published Date: 2008-03-09
Last Modified Date: 2008-11-15