Lucene search

IbmVULNRICHMENT:CVE-2022-43915

HistoryAug 24, 2024 - 11:22 a.m.

CVE-2022-43915 IBM App Connect Enterprise Certified Container

2024-08-2411:22:02

CWE-732

ibm

github.com

ibm

app connect enterprise

certified container

cve-2022-43915

pods

user privileges

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

19.7%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with access to execute commands in a running Pod to elevate their user privileges.

References

exchange.xforce.ibmcloud.com/vulnerabilities/241037

www.ibm.com/support/pages/node/7166463

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

19.7%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2022-43915