The conformance validation endpoint is public so everybody can verify the conformance of onboarded services. The response could contain specific information about the service, including available endpoints, and swagger. It could advise about the running version of a service to an attacker. The attacker could also check if a service is running.
References
| Link | Resource |
|---|---|
| https://github.com/zowe/api-layer | Product |
Configurations
History
19 Dec 2024, 17:00
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:linuxfoundation:zowe_api_mediation_layer:*:*:*:*:*:*:*:* | |
| First Time |
Linuxfoundation zowe Api Mediation Layer
|
25 Nov 2024, 17:56
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-312 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| References | () https://github.com/zowe/api-layer - Product | |
| First Time |
Linuxfoundation
Linuxfoundation api Mediation Layer |
|
| CPE | cpe:2.3:a:linuxfoundation:api_mediation_layer:*:*:*:*:*:*:*:* |
10 Oct 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-10 08:15
Updated : 2024-12-19 17:00
NVD link : CVE-2024-9802
Mitre link : CVE-2024-9802
JSON object : View
Products Affected
linuxfoundation
- zowe_api_mediation_layer
CWE
CWE-312
Cleartext Storage of Sensitive Information