PT-2022-7698 · Ibm · Ibm App Connect Enterprise Certified Container

Published 2022-01-03 · Updated 2025-06-20 · CVE-2022-22491

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise Certified Container versions 7.1 through 12.4

Description The issue is related to unrestricted resource allocation during file writing to the local filesystem, which can lead to a denial of service. This occurs because the operands do not restrict writing to the local filesystem, potentially exhausting the available storage in a pod and causing it to restart.

Recommendations For IBM App Connect Enterprise Certified Container versions 7.1 through 12.4, consider restricting write access to the local filesystem to prevent storage exhaustion and potential pod restarts. As a temporary workaround, restrict access to the local filesystem until a patch is available.

Fix

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

BDU:2025-00246

CVE-2022-22491

Affected Products

Ibm App Connect Enterprise Certified Container

References · 7

• https://osv.dev/vulnerability/CVE-2022-22491 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22491 · Security Note
• https://bdu.fstec.ru/vul/2025-00246 · Security Note
• https://ibm.com/support/pages/node/7180500 · Vendor Advisory
• https://vuldb.com/ru/?id.290928 · Note
• https://t.me/cvedetector/14848 · Telegram Post
• https://t.me/cvenotify/126295 · Telegram Post