CVE-2022-40230 in MQ Appliance

Riassunto

di MITRE • 04/11/2022

"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532."

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 08/09/2022
• Divulgazione: 04/11/2022
• Moderazione: accettato
• Voce: VDB-212903
• CPE: pronto
• CWE: CWE-613 (confermato)
• CVSS: 6.5 (NVD)
• EPSS: 0.00418
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-40230
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-40230
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-40230/