critical9.0
CVE-2024-9798
The health endpoint is public so everybody can see a list of all services.
Impact
The health endpoint is public so everybody can see a list of all services. It is potentially valuable information for attackers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxfoundation | Zowe Api Mediation Layer | from 1.0.0 before 1.28.8 from 2.0.0 before 2.18.0 |