Vulnerability in IBM Cloud Pak For Multicloud Management Monitoring
CVE-2022-42438
IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.
EPSS: 0.005 (41.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Ibm Cloud Pak For Multicloud Management Monitoring — versions 2.0, 2.3
- Ibm Cloud_pak_for_multicloud_management_monitoring — versions 2.3.0
- Linux Linux_kernel
Weakness classification (CWE)
References
- psirt@us.ibm.com (vendor-advisory, Patch, Vendor Advisory)
- psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-42438?
- CVE-2022-42438 is a high-severity vulnerability in IBM Cloud Pak For Multicloud Management Monitoring, classified under Direct Request (Forced Browsing). CVSS score: 7.5/10. Published 2023-02-08.
- How severe is CVE-2022-42438?
- High severity. CVSS v3 base score is 7.5 out of 10.