CVE-2022-42439: IBM App Connect Enterprise information disclosure

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-06 · updated 2026-06-17
Weakness: CWE-200

Description

IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s credentials to be exposed to a privileged attacker. IBM X-Force ID: 238211.

Affected products

IBM App Connect Enterprise: from 11.0.0.17 through 11.0.0.19; 12.0.4.0, 12.0.5.0
IBM App Connect Enterprise Certified Container: 4.1, 4.2, 5.0, 5.1, 5.2, 6.0

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/238211
https://www.ibm.com/support/pages/node/6952435
https://exchange.xforce.ibmcloud.com/vulnerabilities/238211
https://www.ibm.com/support/pages/node/6952435

Get alerted when CVE-2022-42439 or the next vulnerability affects your stack