Skip to content
Sign in
7.5 High

CVE-2022-42438 IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin…

Description

IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.

Affected products and versions

Product Affected versions Fixed in
Cloud Pak for Multicloud Management Monitoring Versions not published

Other CVEs of Cloud Pak for Multicloud Management Monitoring

The 3 CVEs of Cloud Pak for Multicloud Management Monitoring →
CVE-2021-38941 IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable… 5.3 Medium CVE-2021-20341 IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which… 5.3 Medium
Track this CVE