8.8
CVE-2023-26284
- EPSS 0.09%
- Published 15.03.2023 18:15:10
- Last modified 21.11.2024 07:51:03
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Mq Certified Container SwEditionlts Version >= 9.3.0.1 < 9.3.0.4
Ibm ≫ Mq Certified Container SwEditioncontinous_delivery Version >= 9.3.1.0 < 9.3.2.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.274 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| psirt@us.ibm.com | 7.5 | 1.6 | 5.9 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|