Skip to content
OpenAdvisories
Low WID-SEC-2024-0935 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service

Published Apr 21, 2024 · Updated Apr 21, 2024 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

  • None 0.0
    CVE-2024-27088 Public exploit

    es5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`

    es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into `function#copy` or `function#toStringTokens` may cause the script to stall. The vulnerability is patched in v0.10.63.

    medikoo es5-ext node-es5-ext es5-ext Debian Ubuntu npm

Revision history

  1. #1

    Initiale Fassung

References