4
CVE-2022-22326
- EPSS 0.05%
- Published 01.08.2022 11:15:13
- Last modified 21.11.2024 06:46:38
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized viewing of logs and files due to insufficient authorization checks. IBM X-Force ID: 218856.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Datapower Gateway Version >= 10.0.1.0 < 10.0.1.6
Ibm ≫ Datapower Gateway Version >= 10.0.2.0 < 10.0.5.0
Ibm ≫ Datapower Gateway Version >= 2018.4.1.0 < 2018.4.1.19
Ibm ≫ Mq Appliance M2002 Firmware SwEditionlong_term_support Version < 9.2.0.5
Ibm ≫ Mq Appliance M2002 Firmware SwEditioncontinuous_delivery Version < 9.2.5
Ibm ≫ Mq Appliance M2001 Firmware SwEditionlong_term_support Version < 9.2.0.5
Ibm ≫ Mq Appliance M2001 Firmware SwEditioncontinuous_delivery Version < 9.2.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.169 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 3.3 | 1.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| psirt@us.ibm.com | 4 | 2.5 | 1.4 |
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.