Medium WID-SEC-2024-3511 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service

Published Nov 19, 2024 · Updated Nov 19, 2024 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

High 7.5

CVE-2024-21536

Denial of service in http-proxy-middleware

Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an UnhandledPromiseRejection error thrown by micromatch. An attacker could kill the Node.js process and crash the server b…

katib-suggestion-hyperopt katib-earlystopping katib-suggestion-optuna-enas katib-suggestion-skopt-enas Wolfi npm

Oct 19, 2024

Revision history

2024-11-19 #1
Initiale Fassung

References

IBM Security Bulletin vom 2024-11-19
https://www.ibm.com/support/pages/node/7176616