Lucene search

[email protected]NVD:CVE-2023-26284

HistoryMar 15, 2023 - 6:15 p.m.

CVE-2023-26284

2023-03-1518:15:10

[email protected]

web.nvd.nist.gov

ibm mq

container

access control

vulnerability

x-force id 248417

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417.

Affected configurations

Nvd

Node

ibmmq_certified_containerRange9.3.0.1–9.3.0.4lts

ibmmq_certified_containerRange9.3.1.0–9.3.2.0continous_delivery

VendorProductVersionCPE
ibmmq_certified_container*cpe:2.3:a:ibm:mq_certified_container:*:*:*:*:lts:*:*:*
ibmmq_certified_container*cpe:2.3:a:ibm:mq_certified_container:*:*:*:*:continous_delivery:*:*:*

Vendor	Product	Version	CPE
ibm	mq_certified_container	*	cpe:2.3:a:ibm:mq_certified_container:::::lts:::*
ibm	mq_certified_container	*	cpe:2.3:a:ibm:mq_certified_container:::::continous_delivery:::*

References

exchange.xforce.ibmcloud.com/vulnerabilities/248417

www.ibm.com/support/pages/node/6960201

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

Related for NVD:CVE-2023-26284

prion1 cvelist1 cve1 ibm1