CVE-2022-42438

CVE-2022-42438 affects IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3. A root cause of the issue is an insufficient restriction of a directory path, allowing users without admin roles to access admin functions by specifying direct URL paths. Supported details from connected source...

CVE-2021-38941

The CVE-2021-38941 entry affects IBM Cloud Pak for Multicloud Management Monitoring. Affected versions 2.0–2.3 run a few containers in privileged mode, enabling potential host information leakage or destruction if an attacker can execute commands inside those containers. Root cause: containers wi...

CVE-2024-43191

CVE-2024-43191 affects IBM Cloud Pak for Multicloud Management (CP4MCM) 2.3 to 2.3 FP8. The issue is a remote command execution vulnerability due to weaknesses in deserializing a specially crafted YAML file, exploitable by a remote authenticated attacker. Remediation: upgrade to CP4MCM 2.3 Fix Pa...

CVE-2021-20341

The CVE-2021-20341 issue affects IBM Cloud Pak for Multicloud Management Monitoring prior to version 2.2.6. It arises from returning potentially sensitive information in HTTP headers, which could enable subsequent attacks against the system. CVSS details in the sources indicate a medium severity ...

CVE-2023-46175

CVE-2023-46175 affects IBM Cloud Pak for Multicloud Management (CP4MCM) versions 2.3 through 2.3 FP8. The issue is that credentials are stored in a log file in plain text, which could be read by a privileged user, exposing sensitive data. The available public remediation is to upgrade to version ...