Paper/Archive/CVE-2022-42443

CVE-2022-42443

IBM Trusteer iOS SDK — Trusteer for mobile file upload

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 39.9.399 × 208.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An undisclosed issue in Trusteer iOS SDK for mobile versions prior to 5.7 and Trusteer Android SDK for mobile versions prior to 5.7 may allow uploading of files. IBM X-Force ID: 238535.

Affected

ProductAffectedFixed inSource

Trusteer iOS SDK5.7–CNA

Trusteer Android SDK5.7–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ibm (CNA)2.2CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

advisoryibm.com/support/pages/node/6967785 refexchange.xforce.ibmcloud.com/vulnerabilities/238535