CVE-2022-22491CWE-770

IBM App Connect Enterprise Certified Container denial of service

Medium · published January 9, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, and 12.4 operands running in Red Hat OpenShift do not restrict writing to the local filesystem, which may result in exhausting the available storage in a Pod, resulting in that Pod being restarted.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00161 · 4.9th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-01-09T14:11Z
EPSS history
Timeline
  • 09 JAN 14:11Z
    IBM App Connect Enterprise Certified Container denial of service
    cvelistv5