CVE-2022-43922

Опубликовано: 01 фев. 2023

Источник: nvd

CVSS3: 5.3

CVSS3: 6.5

EPSS Низкий

Описание

IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/241583
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6857807
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/241583
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6857807
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:4.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:4.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:5.0:*:*:*:lts:*:*:*

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:5.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:6.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:6.2:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.0004

Низкий

5.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-326

CWE-328

Связанные уязвимости

GHSA-g664-59r4-4vfr

CVSS3: 6.5

github

около 3 лет назад

EPSS

Процентиль: 12%

0.0004

Низкий

5.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-326

CWE-328