Lucene search
IbmCVELIST:CVE-2022-22321HistoryMar 01, 2022 - 4:45 p.m.
CVE-2022-22321
2022-03-0116:45:26
ibm
www.cve.org
4
ibm mq
appliance
local messaging
password hash
insufficient protection
x-force id 218368
CVSS3
5.1
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
AI Score
5.5
Confidence
High
EPSS
0
Percentile
12.6%
IBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that provides insufficient protection. IBM X-Force ID: 218368.
CNA Affected
[
{
"product": "MQ Appliance",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.2 LTS"
},
{
"status": "affected",
"version": "9.2 CD"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2022-03-01 17:15:00
cve
cve
CVE-2022-22321
2022-03-01 17:15:08
ibm
ibm
nvd
nvd
CVE-2022-22321
2022-03-01 17:15:08
veracode
veracode
Insecure Password Storage
2022-03-02 07:12:14
CVSS3
5.1
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
AI Score
5.5
Confidence
High
EPSS
0
Percentile
12.6%
Related for CVELIST:CVE-2022-22321