cbcvebase.
CVE-2022-43922
published 2023-02-01

CVE-2022-43922: IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak…

PriorityP434medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.36%
28.1th percentile
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.

Affected

9 ranges
VendorProductVersion rangeFixed in
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.