CVE-2022-22316
First published: Mon Feb 07 2022(Updated: )
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks. IBM X-Force ID: 218276.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM MQ Appliance | >=9.2.0.0<9.2.0.5 | |
| IBM MQ Appliance | >=9.2.0.0<9.2.5 | |
| IBM MQ Appliance | <=9.2 CD | |
| IBM MQ Appliance | <=9.2 LTS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this IBM MQ vulnerability?
The vulnerability ID for this IBM MQ vulnerability is CVE-2022-22316.
What is the severity rating of CVE-2022-22316?
CVE-2022-22316 has a severity rating of medium with a value of 6.5.
What is the description of CVE-2022-22316?
CVE-2022-22316 is a vulnerability that allows an authenticated and authorized user to cause a denial of service in IBM MQ Appliance 9.2 CD and 9.2 LTS due to incorrectly configured authorization checks.
Which versions of IBM MQ Appliance are affected by CVE-2022-22316?
CVE-2022-22316 affects IBM MQ Appliance versions 9.2 CD and 9.2 LTS.
How can I fix CVE-2022-22316?
To fix CVE-2022-22316, update IBM MQ Appliance to a version that includes the necessary security patch.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/author
- agent/tags
- agent/event
- agent/description
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm mq appliance
- version/ibm mq appliance/9.2.0.0
- version/ibm mq appliance/9.2 cd
- version/ibm mq appliance/9.2 lts