CVE-2023-26284

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/248417", "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/248417", "tags": ["VDB Entry", "Vendor Advisory"], "refsource": "MISC"}, {"url": "https://www.ibm.com/support/pages/node/6960201", "name": "https://www.ibm.com/support/pages/node/6960201", "tags": ["Vendor Advisory"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2023-26284", "ASSIGNER": "psirt@us.ibm.com"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}}, "publishedDate": "2023-03-15T18:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ibm:mq_certified_container:*:*:*:*:continous_delivery:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "9.3.2.0", "versionStartIncluding": "9.3.1.0"}, {"cpe23Uri": "cpe:2.3:a:ibm:mq_certified_container:*:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "9.3.0.4", "versionStartIncluding": "9.3.0.1"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2023-03-19T03:52Z"}