CVE-2022-43915 IBM App Connect Enterprise Certified Container

Medium 6.8 Published 24 Aug 2024 Updated 21 Sep 2024

Privileged users can execute commands in running Pods to elevate privileges due to unrestricted unshare calls in IBM App Connect Enterprise Certified Container.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-43915?

CVE-2022-43915 is a medium-severity vulnerability in IBM App Connect Enterprise Certified Container, published on 24 Aug 2024. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with privileged access to execute commands in a running Pod to elevate their user privileges.

Weakness: CWE-732

Which versions are affected by CVE-2022-43915?

It affects 1 product.

Products include Ibm App Connect Enterprise Certified Container.

How do I fix CVE-2022-43915?

No fix has been published for CVE-2022-43915 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-43915 being exploited?

There is no known exploitation of CVE-2022-43915 in the wild and no public exploit code.

Sources

Also known as GHSA-gwqp-p498-93jr.