PT-2023-14401
CVE-2022-43922
·
تاريخ النشر
2023-02-01
·
تاريخ التحديث
2025-03-26
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM App Connect Enterprise Certified Container versions 4.1 through 6.2
Description
The issue is related to a weak hash of an API Key in the configuration, which could disclose sensitive information to an attacker.
Recommendations
For versions 4.1 through 6.2, consider disabling the use of API Keys in the configuration until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾