IBM App Connect Оператор версии с компакт-диска с 11.3.0 по 11.6.0 и с 12.1.0 по 12.20.0, версии LTS с 12.0.0 по 12.0.20 и операнды сертифицированных контейнеров IBM App Connect Enterprise версии с компакт-диска с 12.0.11.2-r1 по 12.0.12.5-r1 и с 13.0.1.0-r1 по 13.0.6.1-r1 и LTS версий с 12.0.12-r1 по 12.0.12-r20 содержат уязвимость, из-за которой сертифицированный контейнер IBM App Connect Enterprise передает данные в открытом виде, что потенциально позволяет злоумышленнику перехватить и получить конфиденциальную информацию с помощью методов «посредника».
Показать оригинальное описание (EN)
IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Containers Operands versions CD 12.0.11.2‑r1 through 12.0.12.5‑r1 and 13.0.1.0‑r1 through 13.0.6.1‑r1, and LTS versions 12.0.12‑r1 through 12.0.12‑r20, contain a vulnerability in which the IBM App Connect Enterprise Certified Container transmits data in clear text, potentially allowing an attacker to intercept and obtain sensitive information through man‑in‑the‑middle techniques.
Характеристики атаки
Способ атаки
По сети
Атака возможна удалённо
Сложность
Высокая
Сложно эксплуатировать
Нужны права
Не требуются
Права не нужны
Участие пользователя
Не требуется
Не нужно действие пользователя
Последствия
Конфиденциальность
Высокое
Полная утечка данных
Целостность
Нет
Нет модификации данных
Доступность
Нет
Нет нарушения работы
Строка CVSS v3.1
Тип уязвимости (CWE)
Уязвимые продукты 48
| Конфигурация | От (включительно) | До (исключительно) |
|---|---|---|
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.11.2:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.11.3:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r1:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r10:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r11:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r12:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r13:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r14:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r15:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r16:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r17:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r18:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r19:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r2:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r20:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r3:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r4:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r5:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r6:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r7:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r8:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12:r9:*:*:lts:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.0:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.0:r2:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.2:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.3:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.4:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:12.0.12.5:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.1.0:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.1.0:r2:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.1.1:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.0:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.1:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.2:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.2.2:r2:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.3.0:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.3.1:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.4.0:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.4.1:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.4.2:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.5.0:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.5.1:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.5.2:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.6.0:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Enterprise_Certified_Containers_Operands
cpe:2.3:a:ibm:app_connect_enterprise_certified_containers_operands:13.0.6.1:r1:*:*:continuous_delivery:*:*:*
|
— | — |
|
Ibm App_Connect_Operator
cpe:2.3:a:ibm:app_connect_operator:*:*:*:*:continuous_delivery:*:*:*
|
11.3.0
|
<= 11.6.0
|
|
Ibm App_Connect_Operator
cpe:2.3:a:ibm:app_connect_operator:*:*:*:*:lts:*:*:*
|
12.0.0
|
<= 12.0.20
|
|
Ibm App_Connect_Operator
cpe:2.3:a:ibm:app_connect_operator:*:*:*:*:continuous_delivery:*:*:*
|
12.1.0
|
<= 12.20.1
|