high7.5
CVE-2022-42438
IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths.
Impact
IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cloud Pak For Multicloud Management Monitoring | from 2.0.0 before 2.3.0 Version 2.3.0 |