Sensitive Information Disclosure in IBM App Connect Enterprise Certified Container
CVE-2021-29759
4.4MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 7 July 2021
Summary
The IBM App Connect Enterprise Certified Container versions 1.0 through 1.3 are susceptible to a vulnerability that may allow a privileged user to access sensitive information from internal log files. This exposure poses risks concerning data confidentiality and integrity. It is essential for users of the affected versions to review their configurations and implement preventive measures to mitigate potential unauthorized access.
Affected Version(s)
App Connect Enterprise Certified Container 1.0
App Connect Enterprise Certified Container 1.1
App Connect Enterprise Certified Container 1.2
References
CVSS V3.1
Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved