CVEvulnerability

CVE-2022-43922

6.5 MEDIUM Published 2023-02-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-02-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-326, CWE-328

Description

IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.

Affected configurations

• ibm app connect enterprise certified container 4.1 • ibm app connect enterprise certified container 4.2 • ibm app connect enterprise certified container 5.0 • ibm app connect enterprise certified container 5.1 • ibm app connect enterprise certified container 5.2 • ibm app connect enterprise certified container 6.0 • ibm app connect enterprise certified container 6.1 • ibm app connect enterprise certified container 6.2

Related

Weakness · CWE (2)

  • CWE-326 Inadequate Encryption Strength weakness
  • CWE-328 Use of Weak Hash weakness

References