Skip to content
OpenAdvisories
Low WID-SEC-2024-1745 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen

Published Aug 1, 2024 · Updated Aug 1, 2024 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um Informationen offenzulegen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

  • Low 2.0
    CVE-2024-38372

    Undici vulnerable to data leak when using response.arrayBuffer()

    Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process. This has been patched in v6.19.2.

    Node.js undici node-undici undici Ubuntu npm

Revision history

  1. #1

    Initiale Fassung

References