{"id":"CVE-2023-26284","state":"PUBLISHED","title":"IBM MQ Certified Container improper access controls","description":"IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls.  IBM X-Force ID:  248417.","publishedAt":"2023-03-15T17:26:21.136Z","updatedAt":"2025-02-26T21:16:33.240Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"ibm"},"assigner":"ibm","products":["IBM MQ Certified Container"],"affected":[{"vendor":"IBM","product":"MQ Certified Container","defaultStatus":"unaffected","versions":[{"version":"9.3.0.1","status":"affected","lessThan":"9.3.0.3","versionType":"semver"},{"version":"9.3.1.0","status":"affected","lessThan":"9.3.1.1","versionType":"semver"}]}],"references":["https://www.ibm.com/support/pages/node/6960201","https://exchange.xforce.ibmcloud.com/vulnerabilities/248417"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:43.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/26xxx/CVE-2023-26284.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-26284","state":"PUBLISHED","datePublished":"2023-03-15T17:26:21.136Z","dateUpdated":"2025-02-26T21:16:33.240Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2023-02-21T13:55:50.150Z"},"containers":{"cna":{"title":"IBM MQ Certified Container improper access controls","descriptions":[{"lang":"en","value":"IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls.  IBM X-Force ID:  248417."}],"affected":[{"vendor":"IBM","product":"MQ Certified Container","defaultStatus":"unaffected","versions":[{"version":"9.3.0.1","status":"affected","lessThan":"9.3.0.3","versionType":"semver"},{"version":"9.3.1.0","status":"affected","lessThan":"9.3.1.1","versionType":"semver"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6960201","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/248417","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"284 Improper Access Control","lang":"en"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2023-03-15T17:26:21.136Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6960201","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/248417","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T11:46:23.547Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-26T21:16:25.284642Z","id":"CVE-2023-26284","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-26T21:16:33.240Z"}}]}}}