CVE-2022-42438

Published: Feb 8, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.

Affected (6)

Products: Ibm: Cloud Pak For Multicloud Management Monitoring

Ibm

1 product

Cloud Pak For Multicloud Management Monitoring

Configuration A

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Cloud Pak For Multicloud Management Monitoring	From 2.0.0 to 2.3.0
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack2
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack3
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack4
Ibm Cloud Pak For Multicloud Management Monitoring	Version 2.3.0 fixpack5