PT-2024-5326 · Ibm · Ibm App Connect Enterprise

Published 2024-05-21 · Updated 2025-01-07 · CVE-2024-31904

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise versions 11.0.0.1 through 11.0.0.25 IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.0

Description The issue is related to an error in exception handling in the AdminAPI component of IBM App Connect Enterprise, which could allow an authenticated user to cause a denial of service due to an uncaught exception. This could be exploited by a remote attacker.

Recommendations For IBM App Connect Enterprise versions 11.0.0.1 through 11.0.0.25, update to a version that includes the fix for this issue. For IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.0, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the integration nodes to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-248

Related Identifiers

BDU:2024-05954

CVE-2024-31904

Affected Products

Ibm App Connect Enterprise

References · 10

• https://ibm.com/support/pages/node/7154607 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-31904 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05954 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-31904 · Security Note
• https://vuldb.com/?id.265959 · Note
• https://t.me/cvenotify/106679 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1793380728509788500 · Twitter Post
• https://twitter.com/CVEnew/status/1793384155998253060 · Twitter Post
• https://t.me/cvenotify/80778 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/289647 · Note