CVE-2022-43915: IBM App Connect Enterprise Certified Container

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with privileged access to execute commands in a running Pod to elevate their user privileges.

Affected products

• IBM App Connect Enterprise Certified Container: version 5.0 only; version 7.1 only; version 7.2 only; version 8.0 only; version 8.1 only; version 8.2 only; …

Published 2024-08-24. Last modified 2026-06-17.