Code injection

2023-02-0819:15:00

PRIOn knowledge base

www.prio-n.com

code injection

ibm cloud pak

multicloud management monitoring

unauthorized access

admin functions

url paths

security vulnerability

ibm x-force id

nvd

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

JSON

IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.

CPENameOperatorVersion
cloud_pak_for_multicloud_management_monitoringge2.0.0
cloud_pak_for_multicloud_management_monitoringlt2.3.0
cloud_pak_for_multicloud_management_monitoringeq2.3.0
cloud_pak_for_multicloud_management_monitoringeq2.3.0 fixpack4
cloud_pak_for_multicloud_management_monitoringeq2.3.0 fixpack5
cloud_pak_for_multicloud_management_monitoringeq2.3.0 fixpack3
cloud_pak_for_multicloud_management_monitoringeq2.3.0 fixpack2

Name	Operator	Version
cloud_pak_for_multicloud_management_monitoring	ge	2.0.0
cloud_pak_for_multicloud_management_monitoring	lt	2.3.0
cloud_pak_for_multicloud_management_monitoring	eq	2.3.0
cloud_pak_for_multicloud_management_monitoring	eq	2.3.0 fixpack4
cloud_pak_for_multicloud_management_monitoring	eq	2.3.0 fixpack5
cloud_pak_for_multicloud_management_monitoring	eq	2.3.0 fixpack3
cloud_pak_for_multicloud_management_monitoring	eq	2.3.0 fixpack2