CVE-2022-43916

CVSS v3 6.8 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

I

BM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure.

References

Link	Resource
https://www.ibm.com/support/pages/node/7181916	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:ibm:app_connect_enterprise_certified_container:*:*:*:*:*:*:*:*

cpe:2.3:o:redhat:openshift:-:*:*:*:*:*:*:*

History

13 Aug 2025, 17:50

Type	Values Removed	Values Added
First Time		Ibm Redhat Ibm app Connect Enterprise Certified Container Redhat openshift
CPE		cpe:2.3:o:redhat:openshift:-:::::::* cpe:2.3:a:ibm:app_connect_enterprise_certified_container::::::::
References	~~() https://www.ibm.com/support/pages/node/7181916 -~~	() https://www.ibm.com/support/pages/node/7181916 - Vendor Advisory

18 Feb 2025, 19:15

Type	Values Removed	Values Added
CWE	~~CWE-862~~
Summary		(es) Los pods de IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6 y 12.7 no restringen la salida de la red para los pods que se utilizan para la infraestructura interna.

30 Jan 2025, 14:15

Type	Values Removed	Values Added
CWE		CWE-862

30 Jan 2025, 12:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-01-30 12:15

Updated : 2025-08-13 17:50

NVD link : CVE-2022-43916

Mitre link : CVE-2022-43916

CVE.ORG link : CVE-2022-43916

JSON object : View

Products Affected

app_connect_enterprise_certified_container

openshift

CWE

CWE-923

Improper Restriction of Communication Channel to Intended Endpoints

{"id": "CVE-2022-43916", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2025-01-30T12:15:26.867", "references": [{"url": "https://www.ibm.com/support/pages/node/7181916", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-923"}]}], "descriptions": [{"lang": "en", "value": "IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure."}, {"lang": "es", "value": "Los pods de IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6 y 12.7 no restringen la salida de la red para los pods que se utilizan para la infraestructura interna."}], "lastModified": "2025-08-13T17:50:14.573", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:app_connect_enterprise_certified_container:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED569712-C3BF-4164-92F0-46A2ADCFB16E", "versionEndExcluding": "12.8", "versionStartIncluding": "7.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:redhat:openshift:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "22EB28CE-7C7F-4290-85FE-5E3EBF905CF0"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}