PT-2023-14401
CVE-2022-43922
·
Publicado
2023-02-01
·
Atualizado
2025-03-26
Descrição por
CVSS 3.1
6.5
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM App Connect Enterprise Certified Container versions 4.1 through 6.2
Description
The issue is related to a weak hash of an API Key in the configuration, which could disclose sensitive information to an attacker.
Recommendations
For versions 4.1 through 6.2, consider disabling the use of API Keys in the configuration until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾