Cloud Pak For Multicloud Management Monitoring vulnerabilities

2 known vulnerabilities in Cloud Pak For Multicloud Management Monitoring from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Cloud Pak for Multicloud Management: Deserialization of Untrusted Data

  CVE-2024-43191Sep 26, 2024IBM

  IBM ManageIQ could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted yaml file request.

• 8.8 High severity

  Cloud Pak for Multicloud Management Monitoring: Direct Request

  CVE-2022-42438Feb 8, 2023IBM

  IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.