CVE-2022-22356

IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login…

Medium · published April 5, 2022

CVSS v3.0
5.3
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login attempts. IBM X-Force ID: 220487.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/C:H/PR:L/S:U/I:N/UI:N/A:N/AV:N/AC:H/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00877 · 58.6th percentile
Published
2022-04-05T16:45Z
EPSS history
Timeline
  • 05 APR 16:45Z
    IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discrepancy in valid and invalid login…
    cvelistv5