Lucene search
HistoryFeb 01, 2023 - 6:15 p.m.
CVE-2022-43922
ibm
app connect enterprise
certified container
sensitive information disclosure
weak api key hash
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
24.3%
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.
Affected configurations
Node
ibmapp_connect_enterprise_certified_containerMatch4.1
ORibmapp_connect_enterprise_certified_containerMatch4.2
ORibmapp_connect_enterprise_certified_containerMatch5.0lts
ORibmapp_connect_enterprise_certified_containerMatch5.1
ORibmapp_connect_enterprise_certified_containerMatch5.2
ORibmapp_connect_enterprise_certified_containerMatch6.0
ORibmapp_connect_enterprise_certified_containerMatch6.1
ORibmapp_connect_enterprise_certified_containerMatch6.2
redhatopenshiftMatch-
Related
ibm
ibm
osv
osv
CVE-2022-43922
2023-02-01 18:15:10
prion
prion
Code injection
2023-02-01 18:15:00
cve
cve
CVE-2022-43922
2023-02-01 18:15:10
cvelist
cvelist
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
24.3%
Related for NVD:CVE-2022-43922