IBM App Connect Enterprise: Mehrere Schwachstelle

Summary

Product

Vulnerabilities 2

• Medium 5.5
  CVE-2024-35255

  Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

  Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

  Microsoft Azure Identity Library for .NET Microsoft Authentication Library Azure Identity Library for Java Azure Linux Wolfi npm Maven PyPI Go NuGet
  Jun 11, 2024
• Medium 5.3
  CVE-2024-37168

  @grpc/grpc-js can allocate memory for incoming messages well above configured limits

  @grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to versions 1.10.9, 1.9.15, and 1.8.22, there are two separate code paths in which memory can be allocated per message in excess of the `grpc.max_receive_…

  grpc grpc-node kubeflow-centraldashboard jitsucom-jitsu-console Wolfi npm
  Jun 10, 2024

Revision history

1. 2024-08-22 #2

   Neue Updates von IBM aufgenommen

2. 2024-07-22 #1

   Initiale Fassung

References

• IBM Security Bulletin vom 2024-07-22
  https://www.ibm.com/support/pages/node/7160859
• IBM Security Bulletin 7166462 vom 2024-08-23
  https://www.ibm.com/support/pages/node/7166462