Skip to content
OpenAdvisories
Medium WID-SEC-2025-1330 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Manipulation der Konfiguration

Published Jun 16, 2025 · Updated Jun 16, 2025 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um die Konfiguration zu manipulieren.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

  • Low 3.3
    CVE-2025-46328

    NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file

    snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS the Driver reads loggi…

    snowflakedb snowflake-connector-nodejs snowflake-sdk npm

Revision history

  1. #1

    Initiale Fassung

References