IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which may cause a 3rd party system’s credentials to be exposed to a privileged attacker. IBM X-Force ID: 238211.
2023-02-06T21:15:09.200
2024-11-21T07:24:58.383
Modified
CVSSv3.1: 6.8 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | app_connect_enterprise | ≤ 11.0.0.19 | Yes |
| Application | ibm | app_connect_enterprise | 12.0.4.0 | Yes |
| Application | ibm | app_connect_enterprise | 12.0.5.0 | Yes |
| Operating System | ibm | aix | - | No |
| Operating System | linux | linux_kernel | - | No |
| Operating System | microsoft | windows | - | No |
| Application | ibm | app_connect_enterprise_certified_container | 4.1 | Yes |
| Application | ibm | app_connect_enterprise_certified_container | 4.2 | Yes |
| Application | ibm | app_connect_enterprise_certified_container | 5.0 | Yes |
| Application | ibm | app_connect_enterprise_certified_container | 5.1 | Yes |
| Application | ibm | app_connect_enterprise_certified_container | 5.2 | Yes |
| Application | ibm | app_connect_enterprise_certified_container | 6.0 | Yes |
| Application | redhat | openshift | - | No |