IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login attempts. IBM X-Force ID: 220487.
References
Link | Resource |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/220487 | VDB Entry Vendor Advisory |
https://www.ibm.com/support/pages/node/6564711 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
18 Apr 2022, 10:08
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 6.5 |
CWE | CWE-203 | |
CPE | cpe:2.3:a:ibm:mq_appliance:9.2.0.0:*:*:*:lts:*:*:* cpe:2.3:a:ibm:mq_appliance:9.2.0.0:*:*:*:continuous_delivery:*:*:* |
|
References | (CONFIRM) https://www.ibm.com/support/pages/node/6564711 - Patch, Vendor Advisory | |
References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/220487 - VDB Entry, Vendor Advisory |
05 Apr 2022, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-04-05 17:15
Updated : 2024-02-04 22:29
NVD link : CVE-2022-22356
Mitre link : CVE-2022-22356
CVE.ORG link : CVE-2022-22356
JSON object : View
Products Affected
ibm
- mq_appliance
CWE
CWE-203
Observable Discrepancy