CVE-2022-40230

MEDIUM

IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS - Insufficient Session Expiration

Title source: llm
STIX 2.1

Description

"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532."

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0023
EPSS Percentile 45.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-613
Status published
Products (2)
ibm/mq_appliance 9.2.0.0 (2 CPE variants)
ibm/mq_appliance 9.3.0.0 (2 CPE variants)
Published Nov 03, 2022
Tracked Since Feb 18, 2026