Medium WID-SEC-2025-1152 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service

Published May 27, 2025 · Updated May 27, 2025 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

High 7.5

CVE-2024-57699

Netplex Json-smart Uncontrolled Recursion vulnerability

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issu…

trino trino-plugin-opensearch trino-plugin-lakehouse trino-plugin-pinot Debian Ubuntu Wolfi Maven

Feb 5, 2025

Revision history

2025-05-27 #1
Initiale Fassung

References

IBM Security Bulletin vom 2025-05-27
https://www.ibm.com/support/pages/node/7234819
PoC für CVE-2024-57699
https://github.com/TurtleLiu/Vul_PoC/tree/main/CVE-2024-57699