CVE-2022-42443

Published: Feb 17, 2024Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An undisclosed issue in Trusteer iOS SDK for mobile versions prior to 5.7 and Trusteer Android SDK for mobile versions prior to 5.7 may allow uploading of files. IBM X-Force ID: 238535.

Affected (2)

Products: Ibm: Trusteer Android Sdk For Mobile, Trusteer Ios Sdk For Mobile

Ibm

2 products

Trusteer Android Sdk For Mobile

Trusteer Ios Sdk For Mobile

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Trusteer Android Sdk For Mobile	Before 5.7
Ibm Trusteer Ios Sdk For Mobile	Before 5.7

Related CWEs

CWE-434

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/238535

Source: psirt@us.ibm.com

Vendor Advisory

https://www.ibm.com/support/pages/node/6967785

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/238535

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.ibm.com/support/pages/node/6967785

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.