CVE-2024-49338

IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials.

Scoring

Severity

MEDIUM

CVSS base score

4.4

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS probability

0.38%

CWE

CWE-1323

Published

2025-01-18

Last modified

2026-03-13

Affected products

• IBM App Connect Enterprise
• IBM App Connect Enterprise

Weakness type

• CWE-1323

Related vulnerabilities

• CVE-2024-54173 — IBM MQ information disclosure

Markdown version · Browse all CVEs