Lucene search
GoogleOSV:CVE-2022-43922HistoryFeb 01, 2023 - 6:15 p.m.
CVE-2022-43922
2023-02-0118:15:10
Google
osv.dev
3
ibm
app connect enterprise
certified container
sensitive information
api key
hashing
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
24.3%
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.
Related
ibm
ibm
cvelist
cvelist
nvd
nvd
CVE-2022-43922
2023-02-01 18:15:10
cve
cve
CVE-2022-43922
2023-02-01 18:15:10
prion
prion
Code injection
2023-02-01 18:15:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
24.3%
Related for OSV:CVE-2022-43922