title: IBM MQ Certified Container improper access controls
description: IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls.  IBM X-Force ID:  248417.
problem types: 284 Improper Access Control
affected:
{
defaultStatus: unaffected
product: MQ Certified Container
vendor: IBM
versions:
lessThan: 9.3.0.3, status: affected, version: 9.3.0.1, versionType: semver
lessThan: 9.3.1.1, status: affected, version: 9.3.1.0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL