CVE-2023-26284

Published: Mar 15, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417.

Affected (2)

Products: Ibm: Mq Certified Container

Ibm

1 product

Mq Certified Container

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Mq Certified Container	From 9.3.1.0 to 9.3.2.0
Ibm Mq Certified Container	From 9.3.0.1 to 9.3.0.4

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/248417

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6960201

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/248417

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6960201

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.