Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-43922

IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.

Published

2023-02-01T18:15:10.453

Last Modified

2025-03-26T19:15:18.533

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-326
  • Type: Secondary
    CWE-328
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm app_connect_enterprise_certified_container 4.1 Yes
Application ibm app_connect_enterprise_certified_container 4.2 Yes
Application ibm app_connect_enterprise_certified_container 5.0 Yes
Application ibm app_connect_enterprise_certified_container 5.1 Yes
Application ibm app_connect_enterprise_certified_container 5.2 Yes
Application ibm app_connect_enterprise_certified_container 6.0 Yes
Application ibm app_connect_enterprise_certified_container 6.1 Yes
Application ibm app_connect_enterprise_certified_container 6.2 Yes
Application redhat openshift - No
References