CVE-2022-22326

🗓️ 31 Jul 2022 16:05:25Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 71 Views

IBM Datapower Gateway allows unauthorized viewing of logs and files due to insufficient authorization check

Reporter	Title	Published	Views	Family All 10
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway may permit admin users to view and edit files that are not allowed to be read via RBM access rights (CVE-2022-22326)	29 Apr 202502:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance could allow unauthorized viewing of logs and files (CVE-2022-22326)	28 Feb 202215:10	–	ibm
ATTACKERKB	CVE-2022-22326	29 Jul 202200:00	–	attackerkb
CNNVD	IBM MQ Appliance 安全漏洞	28 Feb 202200:00	–	cnnvd
Cvelist	CVE-2022-22326	31 Jul 202216:05	–	cvelist
EUVD	EUVD-2022-27472	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22326	1 Aug 202211:15	–	nvd
OSV	CVE-2022-22326	1 Aug 202211:15	–	osv
Prion	Authorization	1 Aug 202211:15	–	prion
Positive Technologies	PT-2022-15364 · Ibm · Ibm Datapower Gateway	31 Jul 202200:00	–	ptsecurity

NVD

Vulners

Node

ibm datapower_gatewayRange10.0.1.0–10.0.1.6

ibm datapower_gatewayRange10.0.2.0–10.0.5.0

ibm datapower_gatewayRange2018.4.1.0–2018.4.1.19

Node

ibm mq_appliance_m2002_firmwareRange<9.2.0.5long_term_support

ibm mq_appliance_m2002_firmwareRange<9.2.5continuous_delivery

AND

ibm mq_appliance_m2002Match-

Node

ibm mq_appliance_m2001_firmwareRange<9.2.0.5long_term_support

ibm mq_appliance_m2001_firmwareRange<9.2.5continuous_delivery

AND

ibm mq_appliance_m2001Match-

[
  {
    "product": "DataPower Gateway",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "2018.4.1.0"
      },
      {
        "status": "affected",
        "version": "10.0.1.0"
      },
      {
        "status": "affected",
        "version": "10.0.2.0"
      },
      {
        "status": "affected",
        "version": "10.0.4.0"
      },
      {
        "status": "affected",
        "version": "2018.4.1.18"
      },
      {
        "status": "affected",
        "version": "10.1.0.5"
      }
    ]
  }
]