VYPR
← All advisories
High severity7.5NVD Advisory· Published Feb 8, 2023· Updated Jun 17, 2026

CVE-2022-42438

CVE-2022-42438

Description

IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • IBM/Cloud Pak For Multicloud Management Monitoring6 versions
    cpe:2.3:a:ibm:cloud_pak_for_multicloud_management_monitoring:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:ibm:cloud_pak_for_multicloud_management_monitoring:*:*:*:*:*:*:*:*range: >=2.0.0,<2.3.0
    • cpe:2.3:a:ibm:cloud_pak_for_multicloud_management_monitoring:2.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cloud_pak_for_multicloud_management_monitoring:2.3.0:fixpack2:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cloud_pak_for_multicloud_management_monitoring:2.3.0:fixpack3:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cloud_pak_for_multicloud_management_monitoring:2.3.0:fixpack4:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cloud_pak_for_multicloud_management_monitoring:2.3.0:fixpack5:*:*:*:*:*:*
  • IBM/Cloud Pak For Multicloud Managementllm-fuzzy2 versions
    2.0, 2.3+ 1 more
    • (no CPE)range: 2.0, 2.3
    • (no CPE)range: 2.0, 2.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.