cbcvebase.
CVE-2022-42439
published 2023-02-06

CVE-2022-42439: IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which…

PriorityP424medium4.9CVSS 3.1
AVNACLPRHUINSUCHINAN
EPSS
0.67%
47.7th percentile
IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s credentials to be exposed to a privileged attacker. IBM X-Force ID: 238211.

Affected

11 ranges
VendorProductVersion rangeFixed in
ibmapp_connect_enterprise——
ibmapp_connect_enterprise——
ibmapp_connect_enterprise>= 11.0.0.17 < 11.0.0.1911.0.0.19
ibmapp_connect_enterprise11.0.0.17 – 11.0.0.19—
ibmapp_connect_enterprise>= 12.0.4.0 < 12.0.5.012.0.5.0
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.