VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Mar 1, 2022· Updated Jun 17, 2026

CVE-2021-38986

CVE-2021-38986

Description

IBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 212942.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/MQ2 versions
    cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*+ 1 more
    • cpe:2.3:a:ibm:mq:*:*:*:*:continuous_delivery:*:*:*range: >=9.2.0,<9.2.5
    • cpe:2.3:a:ibm:mq:*:*:*:*:lts:*:*:*range: >=9.2.0,<9.2.0.4
  • IBM/Mq Appliancellm-fuzzy2 versions
    9.2 CD and 9.2 LTS+ 1 more
    • (no CPE)range: 9.2 CD and 9.2 LTS
    • (no CPE)range: 9.2 LTS

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.