Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-43922 EUVD-2022-46892GHSA-g664-59r4-4vfr

IBM App Connect Enterprise Certified Container information disclosure

Published Feb 1, 2023 · Updated Mar 26, 2025 · Assigned by ibm

Description

IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, and 6.2 could disclose sensitive information to an attacker due to a weak hash of an API Key in the configuration. IBM X-Force ID: 241583.

Affected products

VendorProductAffectedFixed
IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2 —

References