Description
IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | MQ Certified Container | 9.3.0.1 – < 9.3.0.3, 9.3.1.0 – < 9.3.1.1 | 9.3.0.3 |
Advisories 1
- WID-SEC-2023-0573 IBM MQ: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Mar 6, 2023
References
- https://www.ibm.com/support/pages/node/6960201 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/248417 vdb-entry