CVE-2024-22317

CVSS 3.1 Score 9.1 of 10 (high)

Details

Published Jan 18, 2024
Updated: Jan 24, 2024
CWE ID 307

Summary

CVE-2024-22317 is a vulnerability that affects IBM App Connect Enterprise versions 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0, potentially allowing a remote attacker to obtain sensitive information or cause a denial of service due to improper restriction of excessive authentication attempts. The vulnerability has a base severity rating of CRITICAL and a base score of 9.1 according to CVSS version 3.1, indicating a high potential danger to organizations using the affected products. The exploitability score is 3.9, suggesting that it is moderately easy to exploit this vulnerability over the network without requiring any privileges or user interaction. To remediate this issue, organizations should apply the necessary security patches or updates provided by IBM as soon as they become available to mitigate the risk associated with this vulnerability (CWE-307).

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-22317 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options