IBM App Connect Enterprise up to 11.0.0.24/12.0.11.0 excessive authentication

Summaryinfo

A vulnerability was found in IBM App Connect Enterprise up to 11.0.0.24/12.0.11.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation results in excessive authentication. This vulnerability is known as CVE-2024-22317. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in IBM App Connect Enterprise up to 11.0.0.24/12.0.11.0. Affected is some unknown processing. The manipulation with an unknown input leads to a excessive authentication vulnerability. CWE is classifying the issue as CWE-307. The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.24 and 12.0.1.0 through 12.0.11.0 could allow a remote attacker to obtain sensitive information or cause a denial of service due to improper restriction of excessive authentication attempts. IBM X-Force ID: 279143.

The weakness was published 01/18/2024. The advisory is shared for download at ibm.com. This vulnerability is traded as CVE-2024-22317 since 01/08/2024. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1110.001.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at X-Force (279143). Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• IBM

Name

• App Connect Enterprise

Version

• 11.0.0.0
• 11.0.0.1
• 11.0.0.2
• 11.0.0.3
• 11.0.0.4
• 11.0.0.5
• 11.0.0.6
• 11.0.0.7
• 11.0.0.8
• 11.0.0.9
• 11.0.0.10
• 11.0.0.11
• 11.0.0.12
• 11.0.0.13
• 11.0.0.14
• 11.0.0.15
• 11.0.0.16
• 11.0.0.17
• 11.0.0.18
• 11.0.0.19
• 11.0.0.20
• 11.0.0.21
• 11.0.0.22
• 11.0.0.23
• 11.0.0.24
• 12.0.0
• 12.0.1
• 12.0.2
• 12.0.3
• 12.0.4
• 12.0.5
• 12.0.6
• 12.0.7
• 12.0.8
• 12.0.9
• 12.0.10
• 12.0.11.0

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion