PT-2023-20585 · Ibm · Ibm Mq Certified Container

Publicado 2023-03-15 · Atualizado 2023-03-19 · CVE-2023-26284

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ Certified Container versions 9.3.0.1 through 9.3.0.3 IBM MQ Certified Container versions 9.3.1.0 through 9.3.1.1

Description The issue allows authenticated users with cluster access to be granted administration access to the MQ console due to improper access controls.

Recommendations For IBM MQ Certified Container versions 9.3.0.1 through 9.3.0.3, update to a version outside of this range to resolve the issue. For IBM MQ Certified Container versions 9.3.1.0 through 9.3.1.1, update to a version outside of this range to resolve the issue.

Correção

Identificadores relacionados

CVE-2023-26284

Produtos afetados

Ibm Mq Certified Container

Referências · 6

• https://ibm.com/support/pages/node/6960201 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-26284 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-26284 · Aviso do Fabricante
• https://t.me/cibsecurity/60079 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/248417 · Aviso do Fabricante
• https://t.me/cvenotify/46464 · Publicação no Telegram