Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-9798

Health endpoint offers list of onboarded services to unauthenticated users

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zowe

Description

The health endpoint is public so everybody can see a list of all services. It is potentially valuable information for attackers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open Mainframe Project Zowe

  • 2.0.0 to < 2.18.0affected
  • 1.0.0 to < 1.28.8affected

References