Security Bulletin: IBM Edge Application Manager 4.5 addresses the security vulnerability listed in the CVE below.

Summary IBM Edge Application Manager 4.5 addresses the security vulnerability listed in the CVE below. Vulnerability Details CVEID:CVE-2022-1996 DESCRIPTION: go-restful could allow a remote attacker to bypass security restrictions, caused by improper regular expression implementation in the CORS...

Authorization Bypass

github.com/emicklei/go-restful is vulnerable to Authorization Bypass. A remote attacker is capable of breaking CORS policy via the user-controlled AllowedDomains parameter, allowing any page to make requests and/or retrieve data on behalf of other users...