IBM Cloud Pak For Multicloud Management Monitoring
5 CVEs affecting IBM Cloud Pak For Multicloud Management Monitoring. Latest disclosed: 2024-09-26. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-38941 | High | 8.1 | 2022-06-30 | IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destructi… |
CVE-2022-42438 | High | 7.5 | 2023-02-08 | IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM… |
CVE-2024-43191 | High | 7.2 | 2024-09-26 | IBM ManageIQ could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted yaml file request. |
CVE-2021-20341 | Medium | 5.3 | 2021-03-09 | IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could lead to further attacks against the sys… |
CVE-2023-46175 | Medium | 4.4 | 2024-09-26 | IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user. |