CVEs published by Zowe

CVEs published by Zowe (CVE Numbering Authority). 5 tracked.

CVE-2024-9802 MEDIUM 5.3 UPGRADE The conformance validation endpoint is public so everybody can verify the conformance of onboarded services
CVE-2024-9798 CRITICAL 9.0 UPGRADE The health endpoint is public so everybody can see a list of all services
CVE-2024-6916 MEDIUM 5.9 MITIGATE A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext
CVE-2024-6834 CRITICAL 9.0 A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied re
CVE-2024-6833 MEDIUM 5.9 A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in