Medium WID-SEC-2024-3643 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service

Published Dec 9, 2024 · Updated Dec 9, 2024 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

High 7.5

CVE-2024-21538

Regular Expression Denial of Service (ReDoS) in cross-spawn

Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very la…

katib-suggestion-hyperopt katib-earlystopping katib-suggestion-hyperband katib-suggestion-pbt-enas Azure Linux Alpine Wolfi npm

Nov 8, 2024

Revision history

2024-12-09 #1
Initiale Fassung

References

IBM Security Bulletin vom 2024-12-09
https://www.ibm.com/support/pages/node/7178232