Skip to content
OpenAdvisories
Medium WID-SEC-2024-0956 3 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Apr 23, 2024 · Updated Jan 25, 2026 · Revision 3 · de-DE

Vendor: IBM Product: App Connect Enterprise Product: Db2 Platform: Linux

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Phishing-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 3

  • Medium 6.1
    CVE-2024-29041

    Express.js Open Redirect in malformed URLs

    Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a use…

    expressjs express kubeflow-pipelines-apiserver kubeflow-centraldashboard Debian Ubuntu Azure Linux Wolfi npm
  • Low 3.9
    CVE-2024-30260

    Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline

    Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and Proxy-Authorization headers for `fetch()`, but did not clear them for `undici.request()`. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.

    Node.js undici nodejs nodejs18 Debian Ubuntu Azure Linux npm
  • Low 2.6
    CVE-2024-30261

    Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect

    Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the `integrity` option passed to `fetch()`, allowing `fetch()` to accept requests as valid even if they have been tampered. This vulnerability was patched in version(s) 5.28…

    Node.js undici nodejs nodejs18 Debian Ubuntu Azure Linux npm

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Neue Updates von IBM aufgenommen

  3. #1

    Initiale Fassung

References