What is CVE-2022-40230?

CVE-2022-40230 is a medium-severity vulnerability in Ibm Mq_appliance, classified under Insufficient Session Expiration. CVSS score: 6.5/10. Published 2022-11-03.

How severe is CVE-2022-40230?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Ibm Mq_appliance

CVE-2022-40230

"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532."

EPSS: 0.004 (34.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Ibm Mq_appliance — versions 9.2.0.0, 9.3.0.0
N/a Ibm Mq Appliance — versions "9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3"

Weakness classification (CWE)

CWE-613 — Insufficient Session Expiration

References

psirt@us.ibm.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-40230?: CVE-2022-40230 is a medium-severity vulnerability in Ibm Mq_appliance, classified under Insufficient Session Expiration. CVSS score: 6.5/10. Published 2022-11-03.
How severe is CVE-2022-40230?: Medium severity. CVSS v3 base score is 6.5 out of 10.