CVE-2022-43915: falha de média gravidade em IBM App Connect Enterprise Certified Container
IBM App Connect Enterprise Certified Container
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.4%
IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with privileged access to execute commands in a running Pod to elevate their user privileges.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
IBM · App Connect Enterprise Certified ContainerCVEs relacionadas — IBM App Connect Enterprise Certified Container
No mesmo produto, das mais perigosas para as menos.
CVE-2022-22404MEDIUMCVE-2022-22404EPSS 1.0%CVE-2022-31770MEDIUMCVE-2022-31770EPSS 0.9%CVE-2020-4785MEDIUMCVE-2020-4785EPSS 0.7%CVE-2024-51465HIGHIBM App Connect Enterprise Certified Container command executionEPSS 0.7%CVE-2024-52362MEDIUMIBM App Connect Enterprise Certified Container denial of serviceEPSS 0.5%CVE-2022-43874MEDIUMIBM App Connect Enterprise Certified ContainerEPSS 0.4%