Lucene search

K
nvd[email protected]NVD:CVE-2022-42444
HistoryFeb 12, 2023 - 4:15 a.m.

CVE-2022-42444

2023-02-1204:15:15
CWE-120
web.nvd.nist.gov
ibm
app connect enterprise
buffer overflow
vulnerability
remote user
crash

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.4%

IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow a buffer and cause the application to crash. IBM X-Force ID: 238538.

Affected configurations

NVD
Node
ibmapp_connect_enterpriseRange11.0.0.811.0.0.19
OR
ibmapp_connect_enterpriseRange12.0.1.012.0.5.0
AND
ibmaixMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.4%

Related for NVD:CVE-2022-42444