CVE-2024-22356

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Mar 26, 2024
CWE ID 117

Summary

CVE-2024-22356 is a vulnerability affecting IBM App Connect Enterprise versions 11.0.0.1 to 11.0.0.23, and 12.0.1.0 to 12.0.9.0, as well as IBM Integration Bus for z/OS 10.1 through 10.1.0.2. The issue allows privileged users to access potentially sensitive information stored in log or trace files. IBM X-Force has identified this vulnerability with ID 280893. This security weakness could lead to unauthorized access to confidential data, posing a significant risk to organizations using these IBM products. It is recommended that affected organizations upgrade to the latest patches to mitigate this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share