App Connect Enterprise Certified Container vulnerabilities

3 known vulnerabilities in App Connect Enterprise Certified Container from IBM. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  App Connect Enterprise Certified Container: Improper Restriction of Communication Channel to Intended Endpoints

  CVE-2022-43916Jan 30, 2025IBM

  IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for inter

• 8.8 High severity

  App Connect Enterprise Certified Container: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-51465Dec 4, 2024IBM

  IBM App Connect Enterprise Certified Container 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, and 12.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

• 8.1 High severity

  App Connect Enterprise Certified Container: Incorrect Permission Assignment for Critical Resource

  CVE-2022-43915Aug 24, 2024IBM

  IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with privileged access to ex