CVE-2022-42439

CWE-200 — Information ExposureCWE-532 — Log File Information Exposure3 documents3 sources
Severity
4.9MEDIUM
EPSS
0.2%
top 51.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM APP Connect EnterpriseIBM APP Connect Enterprise Certified Container
Timeline
PublishedFeb 6
Latest updateJul 6

Description

IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s credentials to be exposed to a privileged attacker. IBM X-Force ID: 238211.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:NExploitability: 2.3 | Impact: 4.0

Affected Packages3 packages

▶CVEListV5ibm/app_connect_enterprise11.0.0.17 — 11.0.0.19+1
▶NVDibm/app_connect_enterprise11.0.0.17 — 11.0.0.19+2

🔴Vulnerability Details

2
GHSA
GHSA-chpv-rv7m-7qxg: IBM App Connect Enterprise 11↗2023-07-06
▶
CVEList
IBM App Connect Enterprise information disclosure↗2023-02-06
▶
CVE-2022-42439 (MEDIUM CVSS 4.9) | IBM App Connect Enterprise 11.0.0.1 | cvebase.io