PT-2023-14401 · Ibm · Ibm App Connect Enterprise Certified Container

Publicado 2023-02-01 · Atualizado 2025-03-26 · CVE-2022-43922

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise Certified Container versions 4.1 through 6.2

Description The issue is related to a weak hash of an API Key in the configuration, which could disclose sensitive information to an attacker.

Recommendations For versions 4.1 through 6.2, consider disabling the use of API Keys in the configuration until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-328

CWE-326

Identificadores relacionados

CVE-2022-43922

Produtos afetados

Ibm App Connect Enterprise Certified Container

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-43922 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/241583 · Aviso do Fabricante
• https://ibm.com/support/pages/node/6857807 · Aviso do Fabricante
• https://t.me/cibsecurity/57331 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-43922 · Aviso do Fabricante
• https://t.me/cvenotify/43931 · Publicação no Telegram
• https://t.me/cvenotify/116396 · Publicação no Telegram