CVE-2022-42438: IBM Cloud Pak For Multicloud Management Monitoring

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin functions by specifying direct URL paths. IBM X-Force ID: 238210.

Affected products

• IBM Cloud Pak For Multicloud Management Monitoring: from 2.0.0, before 2.3.0 (fixed in 2.3.0); version 2.3.0 only

Published 2023-02-08. Last modified 2026-06-17.