VULNERABILITY INTELLIGENCE
CVE-2022-22491
CVSS score5.5 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-01-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, and 12.4 operands running in Red Hat OpenShift do not restrict writing to the local filesystem, which may result in exhausting the available storage in a Pod, resulting in that Pod being restarted.
Weakness classification
- psirt@us.ibm.com: CWE-770
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-770
Primary references
- psirt@us.ibm.com — Vendor Advisory