Description
IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with privileged access to execute commands in a running Pod to elevate their user privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | App Connect Enterprise Certified Container | 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1 | — |
Advisories 1
- WID-SEC-2024-1918 IBM App Connect Enterprise: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Aug 22, 2024
References
- https://www.ibm.com/support/pages/node/7166463 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/241037 vdb-entry