CVE-2022-22404
Assigner: ibm
Published: 2022-03-31T00:00:00
State: PUBLISHED
affected: product: App Connect Enterprise Certified Container
vendor: IBM
versions: status: affected
version: 1.5
status: affected
version: 2.0
status: affected
version: 2.1
status: affected
version: 3.0
status: affected
version: 3.1
datePublic: 2022-03-31T00:00:00
descriptions: value: IBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified Container 1.5, 2.0, 2.1, 3.0, and 3.1) may be vulnerable to denial of service due to excessive rate limiting.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 5.7
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.0/A:H/PR:L/S:U/AV:N/UI:N/AC:L/I:N/C:N/RC:C/RL:O/E:U
version: 3.0
problemTypes: descriptions: description: Denial of Service
type: text