What is CVE-2024-9802?

CVE-2024-9802 is a medium-severity vulnerability in Linuxfoundation Zowe_api_mediation_layer, classified under Cleartext Storage of Sensitive Information. CVSS score: 5.3/10. Published 2024-10-10.

How severe is CVE-2024-9802?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Linuxfoundation Zowe_api_mediation_layer

CVE-2024-9802

The conformance validation endpoint is public so everybody can verify the conformance of onboarded services. The response could contain specific information about the service, including available endpoints, and swagger. It could advise abo…

EPSS: 0.002 (9.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Linuxfoundation Zowe_api_mediation_layer
Open Mainframe Project Zowe — versions 2.11.0

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information

References

zowe-security@lists.openmainframeproject.org (Product, product)

Frequently asked questions

What is CVE-2024-9802?: CVE-2024-9802 is a medium-severity vulnerability in Linuxfoundation Zowe_api_mediation_layer, classified under Cleartext Storage of Sensitive Information. CVSS score: 5.3/10. Published 2024-10-10.
How severe is CVE-2024-9802?: Medium severity. CVSS v3 base score is 5.3 out of 10.