CVE-2022-43915

8.1 highEPSS 0.4%

High (8.1) in ibm app connect enterprise certified container. EPSS 0.4% chance of exploitation in the next 30 days.

IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12.1 does not limit calls to unshare in running Pods. This can allow a user with privileged access to execute commands in a running Pod to elevate their user privileges.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2024-08-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:app_connect_enterprise_certified_container

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/241037
https://www.ibm.com/support/pages/node/7166463

Check your stack JSON