Description
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the ability to run HTTP calls within the running container to can make administrative calls to a running IntegrationRuntime.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | App Connect Operator | 12.1.0 – ≤ 12.21.0, 12.0.0 – ≤ 12.0.28, 13.0.0 – ≤ 13.6.0 | — |
| IBM | App Connect Enterprise Certified Containers Operands | 12.0.11.1-r1 – ≤ 12.0.12.5-r1, 13.0.1.0-r1 – ≤ 13.0.6.2-r1, 12.0.12-r1 – ≤ 12.0.12-r28, 13.0.7.0-r1 – ≤ 13.0.9.0-r1 | — |
References
- https://www.ibm.com/support/pages/node/7296008 vendor-advisory patch