CVE-2022-40230

2022-11-0300:00:00

ibm

www.cve.org

ibm

appliance

security

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

19.7%

JSON

“IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532.”

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "IBM MQ Appliance ",
    "versions": [
      {
        "version": "\"9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3\"",
        "status": "affected"
      }
    ]
  }
]

References

www.ibm.com/support/pages/node/6622051