CVE-2022-22326

CVSS 4 MEDIUMEPSS 0.2%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

31 Jul 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized viewing of logs and files due to insufficient authorization checks. IBM X-Force ID: 218856.

CVSS:3.0/A:N/S:U/AC:L/I:N/C:L/AV:L/UI:N/PR:N/E:U/RL:O/RC:C

Affected products

IBM · DataPower Gateway

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/218856 https://www.ibm.com/support/pages/node/6560048 https://www.ibm.com/support/pages/node/6608598