CVE-2022-22326

Katalog CVE

CVSS 3.3 · Low EPSS 0,20%

Kerentanan Incorrect Authorization pada ibm datapower gateway, ibm mq appliance m2002 firmware +1 lainnya. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized viewing of logs and files due to insufficient authorization checks. IBM X-Force ID: 218856.

Rincian

Terbit di NVD

1 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://exchange.xforce.ibmcloud.com/vulnerabilities/218856 vdb entry · advisory vendor
• https://www.ibm.com/support/pages/node/6560048 patch · advisory vendor
• https://www.ibm.com/support/pages/node/6608598 patch · advisory vendor