CVE-2022-43915

CVSS V2 None CVSS V3 None

Description

IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with access to execute commands in a running Pod to elevate their user privileges.

Overview

CVE ID
CVE-2022-43915

Assigner
ibm

Vulnerability Status
PUBLISHED

Published Version
2024-08-24T11:22:02.059Z

Last Modified Date
2024-08-24T11:22:02.059Z

Weakness Enumerations

CWE	URL
CWE-732	http://cwe.mitre.org/data/definitions/732.html

References

Reference URL	Reference Tags
https://www.ibm.com/support/pages/node/7166463	vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/241037	vdb-entry

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-43915
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43915

History

Created	Old Value	New Value	Data Type	Notes
2024-08-25 12:03:57				Added to TrackCVE