Sensitive Information Disclosure in IBM App Connect Enterprise Certified Container
CVE-2021-29759

4.4MEDIUM

Key Information:

Vendor
IBM
Status
App Connect Enterprise Certified Container
Vendor
CVE Published:
7 July 2021

Summary

The IBM App Connect Enterprise Certified Container versions 1.0 through 1.3 are susceptible to a vulnerability that may allow a privileged user to access sensitive information from internal log files. This exposure poses risks concerning data confidentiality and integrity. It is essential for users of the affected versions to review their configurations and implement preventive measures to mitigate potential unauthorized access.

Affected Version(s)

App Connect Enterprise Certified Container 1.0

App Connect Enterprise Certified Container 1.1

App Connect Enterprise Certified Container 1.2

References

https://www.ibm.com/support/pages/node/6469449
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/202212
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.