← CVE Intelligence

CVE-2024-9798

Health endpoint offers list of onboarded services to unauthenticated users PUBLISHED

Description (CNA)

The health endpoint is public so everybody can see a list of all services. It is potentially valuable information for attackers.

Affected (CNA)

Vendor / productVersions
Open Mainframe Project / Zoweaffected 2.0.0 before 2.18.0; affected 1.0.0 before 1.28.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.