CVE-2022-22491: ibm app_connect_enterprise_certified_container

Vulnerability summary

CVE-2022-22491 is a medium (CVSS 5.5) vulnerability in ibm app_connect_enterprise_certified_container. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.9% of scored vulnerabilities.

Timeline

1. 09-01-2025
   PublishedVulnerability first disclosed.
2. 09-01-2025
   Last modifiedVulnerability information updated.

Description

IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, and 12.4 operands running in Red Hat OpenShift do not restrict writing to the local filesystem, which may result in exhausting the available storage in a Pod, resulting in that Pod being restarted.

• CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.