Description
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensitive information in log or trace files that could be read by a privileged user. IBM X-Force ID: 280893.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | App Connect Enterprise | 11.0.0.1 – ≤ 11.0.0.23, 12.0.1.0 – ≤ 12.0.9.0 | — |
| IBM | Integration Bus | 10.1 – ≤ 10.1.0.2 | — |
Advisories 1
- WID-SEC-2024-0713 IBM App Connect Enterprise und Integration Bus für z/OS: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Nov 18, 2024
References
- https://www.ibm.com/support/pages/node/7145144 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/280893 vdb-entry