PT-2023-14401 · Ibm · Ibm App Connect Enterprise Certified Container

Published 2023-02-01 · Updated 2025-03-26 · CVE-2022-43922

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise Certified Container versions 4.1 through 6.2

Description The issue is related to a weak hash of an API Key in the configuration, which could disclose sensitive information to an attacker.

Recommendations For versions 4.1 through 6.2, consider disabling the use of API Keys in the configuration until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-328

CWE-326

Related Identifiers

CVE-2022-43922

Affected Products

Ibm App Connect Enterprise Certified Container

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-43922 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/241583 · Vendor Advisory
• https://ibm.com/support/pages/node/6857807 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-43922 · Vendor Advisory
• https://t.me/cibsecurity/57331 · Telegram Post
• https://t.me/cvenotify/43931 · Telegram Post
• https://t.me/cvenotify/116396 · Telegram Post