Description
The health endpoint is public so everybody can see a list of all services. It is potentially valuable information for attackers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Open Mainframe Project | Zowe | 2.0.0 – < 2.18.0, 1.0.0 – < 1.28.8 | 2.18.0 |