Vulnerabilities > IBM > Cloud PAK FOR Multicloud Management Monitoring > 2.2.6

DATE CVE VULNERABILITY TITLE RISK
2023-02-08 CVE-2022-42438 Forced Browsing vulnerability in IBM Cloud PAK for Multicloud Management Monitoring
IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths.
network
low complexity
ibm CWE-425
8.8