{"id":"CVE-2022-22404","state":"PUBLISHED","title":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due ","description":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting.","publishedAt":"2022-04-01T16:45:31.249Z","updatedAt":"2024-09-16T19:15:51.585Z","severity":{"score":6.5,"label":"Medium","version":"3.0","vector":"CVSS:3.0/A:H/PR:L/S:U/AV:N/UI:N/AC:L/I:N/C:N/RC:C/RL:O/E:U","source":"ibm"},"assigner":"ibm","products":["IBM App Connect Enterprise Certified Container"],"affected":[{"vendor":"IBM","product":"App Connect Enterprise Certified Container","versions":[{"version":"1.5","status":"affected"},{"version":"2.0","status":"affected"},{"version":"2.1","status":"affected"},{"version":"3.0","status":"affected"},{"version":"3.1","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6568359","https://exchange.xforce.ibmcloud.com/vulnerabilities/222575"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:38.433Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/22xxx/CVE-2022-22404.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-22404","state":"PUBLISHED","datePublished":"2022-04-01T16:45:31.249Z","dateUpdated":"2024-09-16T19:15:51.585Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2022-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting."}],"affected":[{"vendor":"IBM","product":"App Connect Enterprise Certified Container","versions":[{"version":"1.5","status":"affected"},{"version":"2.0","status":"affected"},{"version":"2.1","status":"affected"},{"version":"3.0","status":"affected"},{"version":"3.1","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6568359","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/222575","name":"ibm-appconnect-cve202222404-dos (222575)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"LOW","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":5.7,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/A:H/PR:L/S:U/AV:N/UI:N/AC:L/I:N/C:N/RC:C/RL:O/E:U","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Denial of Service","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2022-04-01T16:45:31.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2022-03-31T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2022-03-31T00:00:00","ID":"CVE-2022-22404","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"App Connect Enterprise Certified Container","version":{"version_data":[{"version_value":"1.5"},{"version_value":"2.0"},{"version_value":"2.1"},{"version_value":"3.0"},{"version_value":"3.1"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting."}]},"impact":{"cvssv3":{"BM":{"A":"H","AC":"L","AV":"N","C":"N","I":"N","PR":"L","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Denial of Service"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/6568359","refsource":"CONFIRM","title":"IBM Security Bulletin 6568359 (App Connect Enterprise Certified Container)","url":"https://www.ibm.com/support/pages/node/6568359"},{"name":"ibm-appconnect-cve202222404-dos (222575)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/222575"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6568359","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/222575","name":"ibm-appconnect-cve202222404-dos (222575)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T03:14:54.916Z"}}]}}}