CVE-2023-26284

ALTO 8.8CVE-2023-26284 · Published 15/03/2023 · updated 17/06/2026

In breve

CVE-2023-26284 è una vulnerabilità ALTO (CVSS 8.8) che riguarda mq certified container (ibm).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.75%, superiore al 55.0% delle vulnerabilità.
Correzione: aggiornare a 9.3.0.4, 9.3.2.0 o successiva.

Package	Affected versions	Patched versions
mq certified container ibm	`≥ 9.3.0.1, < 9.3.0.4≥ 9.3.1.0, < 9.3.2.0`	`9.3.0.49.3.2.0`

Description

IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417.

References

exchange.xforce.ibmcloud.com/vulnerabilities/248417 · VDB Entry
ibm.com/support/pages/node/6960201 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free