CVEvulnerability

CVE-2022-43915

8.1 HIGH Published 2024-08-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-08-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-732

Description

IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with privileged access to execute commands in a running Pod to elevate their user privileges.

Affected configurations

• ibm app connect enterprise certified container 5.0 • ibm app connect enterprise certified container 7.1 • ibm app connect enterprise certified container 7.2 • ibm app connect enterprise certified container 8.0 • ibm app connect enterprise certified container 8.1 • ibm app connect enterprise certified container 8.2 • ibm app connect enterprise certified container 9.0 • ibm app connect enterprise certified container 9.1 • ibm app connect enterprise certified container 9.2 • ibm app connect enterprise certified container 10.0 • ibm app connect enterprise certified container 10.1 • ibm app connect enterprise certified container 11.0 • ibm app connect enterprise certified container 11.1 • ibm app connect enterprise certified container 11.2 • ibm app connect enterprise certified container 11.3 • ibm app connect enterprise certified container 11.4 • ibm app connect enterprise certified container 11.5 • ibm app connect enterprise certified container 11.6 • ibm app connect enterprise certified container 12.0 • ibm app connect enterprise certified container 12.1

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References