CVE-2022-43922

IBM App Connect Enterprise Certified Container information disclosure

Medium · published February 1, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00358 · 28.3th percentile
Published
2023-02-01T17:32Z
EPSS history
Timeline
  • 01 FEB 17:32Z
    IBM App Connect Enterprise Certified Container information disclosure
    cvelistv5