CVE-2024-22356mediumCWE-117

CVE-2024-22356: falha de média gravidade em IBM App Connect Enterprise

IBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosure

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar App Connect Enterprise+ Monitorar Integration Bus

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.9epss 0.5%
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensitive information in log or trace files that could be read by a privileged user. IBM X-Force ID: 280893.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
IBM · App Connect EnterpriseIBM · Integration Bus
CVEs relacionadas — IBM App Connect Enterprise

No mesmo produto, das mais perigosas para as menos.

CVE-2018-1801MEDIUMCVE-2018-1801EPSS 2.5%CVE-2017-1126—CVE-2017-1126EPSS 1.2%CVE-2022-42444MEDIUMIBM App Connect Enterprise denial of serviceEPSS 1.1%CVE-2024-22317CRITICALIBM App Connect Enterprise denial of serviceEPSS 1.0%CVE-2026-14522HIGHIBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settingsEPSS 1.0%CVE-2017-1693—CVE-2017-1693EPSS 0.9%