PT-2025-1368 · Ibm · Ibm App Connect Enterprise Certified Container

Published 2025-01-29 · Updated 2025-08-13 · CVE-2022-43916

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise Certified Container versions 7.1 through 12.7

Description The issue concerns the IBM App Connect Enterprise Certified Container, where Pods used for internal infrastructure do not restrict network egress. This could potentially allow unauthorized access or data leakage.

Recommendations For IBM App Connect Enterprise Certified Container versions 7.1 through 12.7, restrict network egress for Pods used for internal infrastructure to minimize the risk of exploitation. Consider configuring network policies to limit outgoing traffic from these Pods.

Fix

Missing Authorization

Weakness Enumeration

CWE-923

CWE-862

CWE-264

Related Identifiers

BDU:2025-11361

CVE-2022-43916

Affected Products

Ibm App Connect Enterprise Certified Container

References · 8

• https://ibm.com/support/pages/node/7181916 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11361 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43916 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43916 · Security Note
• https://t.me/cveNotify/132115 · Telegram Post
• https://t.me/cvedetector/16762 · Telegram Post
• https://t.me/cvenotify/109165 · Telegram Post
• https://t.me/cvenotify/109144 · Telegram Post