CVE-2022-43916CWE-923

IBM App Connect Enterprise Certified Container improper communications restriction

Medium · published January 30, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
18.9
In the wild
Unconfirmed
What it is

IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00275 · 18.9th percentile
Weakness
CWE-923 · Improper Restriction of Communication Channel to Intended Endpoints
Published
2025-01-30T12:04Z
EPSS history
Timeline
  • 30 JAN 12:04Z
    IBM App Connect Enterprise Certified Container improper communications restriction
    cvelistv5