PT-2023-14401
CVE-2022-43922
·
Published
2023-02-01
·
Updated
2025-03-26
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM App Connect Enterprise Certified Container versions 4.1 through 6.2
Description
The issue is related to a weak hash of an API Key in the configuration, which could disclose sensitive information to an attacker.
Recommendations
For versions 4.1 through 6.2, consider disabling the use of API Keys in the configuration until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾