CVE-2022-43859

CVE-2022-43859 is a medium-severity SQL injection vulnerability affecting IBM Navigator for i versions 7.3, 7.4, and 7.5. An authenticated attacker can exploit this flaw to gain unauthorized access to sensitive file permission information, even for objects they are otherwise authorized to view, by performing a UNION-based SQL injection. The attack requires low privileges and no user interaction, resulting in a low impact on confidentiality. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.