CVE-2022-43916: IBM App Connect Enterprise Certified Container improper communications restriction
IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure.
Other sources
IBM App Connect Enterprise Certified Container Pods does not restrict network egress for Pods that are used for internal infrastructure.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-43916?
The severity of CVE-2022-43916 is categorized as high due to unrestricted network egress for internal infrastructure Pods.
How do I fix CVE-2022-43916?
To fix CVE-2022-43916, implement network policies to restrict egress traffic for affected Pods in IBM App Connect Enterprise.
Which versions of IBM App Connect Enterprise are affected by CVE-2022-43916?
CVE-2022-43916 affects all versions of IBM App Connect Enterprise Certified Container from 7.1 to 12.7.
Is CVE-2022-43916 related to container security?
Yes, CVE-2022-43916 is related to container security, as it involves network egress controls for Pods.
What are the potential risks of CVE-2022-43916?
The potential risks of CVE-2022-43916 include unauthorized access and data exfiltration through unrestricted network egress.