Lucene search

K
cve[email protected]CVE-2024-31893
HistoryMay 22, 2024 - 7:15 p.m.

CVE-2024-31893

2024-05-2219:15:08
CWE-324
web.nvd.nist.gov
26
ibm
app connect enterprise
unauthorized access
sensitive information
calendar
expired access token

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

5.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token. IBM X-Force ID: 288174.

Affected configurations

Vulners
Node
ibmapp_connect_enterpriseRange12.0.1.012.0.12.1

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:app_connect_enterprise:12.0.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:app_connect_enterprise:12.0.12.1:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "App Connect Enterprise",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "12.0.12.1",
        "status": "affected",
        "version": "12.0.1.0",
        "versionType": "semver"
      }
    ]
  }
]

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

5.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

Related for CVE-2024-31893