Skip to content
OpenAdvisories

Vendor

Open Mainframe Project

7 known vulnerabilities.

Products

Zowe 6 Zowe CLI - Imperative 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2024-6834

    Imperative Local Command Injection allows Activity Masking

    A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by Zowe's client certificate. This allows access to a user to the endpoints requiring an internal client certificate without any credentials. I…

    Open Mainframe Project Zowe