NetSight
low3.3

CVE-2022-22326

IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized viewing of logs and fil…

Impact

IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized viewing of logs and files due to insufficient authorization checks. IBM X-Force ID: 218856.

Affected products

VendorProductAffected versions
IbmDatapower Gateway
from 10.0.1.0 before 10.0.1.6
from 10.0.2.0 before 10.0.5.0
from 2018.4.1.0 before 2018.4.1.19
IbmMq Appliance M2002 Firmware
before 9.2.0.5
before 9.2.5
IbmMq Appliance M2001 Firmware
before 9.2.0.5
before 9.2.5

Weakness classification

References