CVE-2022-22491 — IBM App Connect Enterprise Certified Container denial of service

CVE-2022-22491

IBM App Connect Enterprise Certified Container denial of service PUBLISHED

Description (CNA)

IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, and 12.4 operands running in Red Hat OpenShift do not restrict writing to the local filesystem, which may result in exhausting the available storage in a Pod, resulting in that Pod being restarted.

Affected (CNA)

Vendor / product	Versions
IBM / App Connect Enterprise Certified Container	affected 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4

CWE

CWE-770

References

https://www.ibm.com/support/pages/node/7180500

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.