Lucene search

IbmCVE-2023-26284

HistoryMar 15, 2023 - 6:15 p.m.

CVE-2023-26284

2023-03-1518:15:10

ibm

web.nvd.nist.gov

ibm

certified

container

cve-2023-26284

nvd

vulnerability

access controls

x-force id

248417

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417.

Affected configurations

Nvd

Vulners

Node

ibmmq_certified_containerRange9.3.0.1–9.3.0.4lts

ibmmq_certified_containerRange9.3.1.0–9.3.2.0continous_delivery

VendorProductVersionCPE
ibmmq_certified_container*cpe:2.3:a:ibm:mq_certified_container:*:*:*:*:lts:*:*:*
ibmmq_certified_container*cpe:2.3:a:ibm:mq_certified_container:*:*:*:*:continous_delivery:*:*:*

Vendor	Product	Version	CPE
ibm	mq_certified_container	*	cpe:2.3:a:ibm:mq_certified_container:::::lts:::*
ibm	mq_certified_container	*	cpe:2.3:a:ibm:mq_certified_container:::::continous_delivery:::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "MQ Certified Container",
    "vendor": "IBM",
    "versions": [
      {
        "lessThan": "9.3.0.3",
        "status": "affected",
        "version": "9.3.0.1",
        "versionType": "semver"
      },
      {
        "lessThan": "9.3.1.1",
        "status": "affected",
        "version": "9.3.1.0",
        "versionType": "semver"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/248417

www.ibm.com/support/pages/node/6960201

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

Related for CVE-2023-26284