CVE-2022-42438 — IBM Cloud Pak for Multicloud Management Monitoring privilege escalation

CVE-2022-42438

IBM Cloud Pak for Multicloud Management Monitoring privilege escalation PUBLISHED

Description (CNA)

IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.

Affected (CNA)

Vendor / product	Versions
IBM / Cloud Pak for Multicloud Management Monitoring	affected 2.0, 2.3

CWE

No CWE identifiers supplied.

References

https://www.ibm.com/support/pages/node/6909427
https://exchange.xforce.ibmcloud.com/vulnerabilities/238210

ADP enrichment

CVE

No English description supplied.

https://www.ibm.com/support/pages/node/6909427
https://exchange.xforce.ibmcloud.com/vulnerabilities/238210

CISA-ADP

No English description supplied.

No references supplied.