CVE-2022-43922

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-43922
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/241583 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6857807 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/241583 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6857807 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:app_connect_enterprise_certified_container:4.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:4.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:5.0:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:5.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:6.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:6.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:6.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:*
History

26 Mar 2025, 19:15

Type Values Removed Values Added
CWE CWE-328

21 Nov 2024, 07:27

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 6.5 		v2 : unknown
v3 : 5.3
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/241583 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/241583 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/6857807 - Patch, Vendor Advisory () https://www.ibm.com/support/pages/node/6857807 - Patch, Vendor Advisory

07 Nov 2023, 03:54

Type Values Removed Values Added
Summary IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583. IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-200 CWE-326
Information

Published : 2023-02-01 18:15

Updated : 2025-03-26 19:15

NVD link : CVE-2022-43922

Mitre link : CVE-2022-43922

CVE.ORG link : CVE-2022-43922

JSON object : View

Products Affected

redhat

  • openshift

ibm

  • app_connect_enterprise_certified_container
CWE
CWE-326

Inadequate Encryption Strength

CWE-328

Use of Weak Hash