Skip to content
OpenAdvisories
Low WID-SEC-2024-1219 3 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published May 22, 2024 · Updated May 22, 2024 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Informationen offenzulegen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 3

  • Medium 4.3
    CVE-2024-31893

    IBM App Connect Enterprise information disclosure

    IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token. IBM X-Force ID: 288174.

    IBM App Connect Enterprise
  • Medium 4.3
    CVE-2024-31894

    IBM App Connect Enterprise information disclosure

    IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288175.

    IBM App Connect Enterprise
  • Medium 4.3
    CVE-2024-31895

    IBM App Connect Enterprise information disclosure

    IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288176.

    IBM App Connect Enterprise

Revision history

  1. #1

    Initiale Fassung

References