Denial of Service in IBM App Connect Enterprise Certified Container
CVE-2022-31770

4.9MEDIUM

Key Information:

Vendor
IBM
Status
App Connect Enterprise Certified Container
Vendor
CVE Published:
4 July 2022

Summary

IBM App Connect Enterprise Certified Container 4.2 contains a vulnerability that allows an authenticated user with access to the administration console to create a specially crafted request. This can cause a denial of service, disrupting the availability of the application. Organizations utilizing this software must ensure proper access controls are in place to mitigate risks associated with this vulnerability.

Affected Version(s)

App Connect Enterprise Certified Container 4.2

References

https://www.ibm.com/support/pages/node/6601125
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/228221
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.