CVE-2024-22356

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Mar 26, 2024
CWE ID 117

Summary

The vulnerability identified as CVE-2024-22356 affects IBM App Connect Enterprise versions 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0, and IBM Integration Bus for z/OS versions 10.1 through 10.1.0.2, allowing potentially sensitive information to be stored in log or trace files that can be accessed by a privileged user. The vulnerability has a CVSS score of 4.9, indicating a medium severity level, with high privileges required for exploitation and no user interaction necessary. It poses a high risk to the confidentiality of an organization's data but does not impact integrity or availability of systems. To remediate this vulnerability, organizations should apply the necessary updates or patches provided by IBM to address the issue and ensure sensitive information is not accessible to unauthorized users.

Source: psirt@us.ibm.com

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-22356 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options