CVE-2024-22356CWE-117

IBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosure

Medium · published March 26, 2024

CVSS v3.1
4.9
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensitive information in log or trace files that could be read by a privileged user. IBM X-Force ID: 280893.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00538 · 44.5th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2024-03-26T14:12Z
EPSS history
Timeline
  • 26 MAR 14:12Z
    IBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosure
    cvelistv5