CVE-2022-43915: IBM App Connect Enterprise Certified Container

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-24 · updated 2026-06-17
Weakness: CWE-732

Description

IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with privileged access to execute commands in a running Pod to elevate their user privileges.

Affected products

IBM App Connect Enterprise Certified Container: 5.0, 7.1, 7.2, 8.0, 8.1, 8.2 (+14)

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/241037
https://www.ibm.com/support/pages/node/7166463

Get alerted when CVE-2022-43915 or the next vulnerability affects your stack