Skip to content
OpenAdvisories
Low WID-SEC-2025-1101 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service

Published May 19, 2025 · Updated May 19, 2025 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

  • Low 3.1
    CVE-2025-47279

    undici Denial of Service attack via bad certificate data

    Undici is an HTTP/1.1 client for Node.js. Prior to versions 5.29.0, 6.21.2, and 7.5.0, applications that use undici to implement a webhook-like system are vulnerable. If the attacker set up a server with an invalid certificate, and they can force the applicat…

    Node.js undici nodejs code-server Debian Ubuntu Azure Linux Wolfi npm

Revision history

  1. #1

    Initiale Fassung

References