Skip to content
OpenAdvisories
Medium WID-SEC-2024-1215 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service

Published May 21, 2024 · Updated May 21, 2024 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

  • Medium 6.5
    CVE-2024-28863

    node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation

    node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process. An attacker who generates a large number of sub-folders can consume memory on the system running node-tar and even…

    isaacs node-tar nodejs lerna Debian Ubuntu Azure Linux Wolfi npm

Revision history

  1. #1

    Initiale Fassung

References