zowe_api_mediation_layer vulnerabilities
1 known vulnerability in zowe_api_mediation_layer from Linux Foundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.0average CVSS score
Latest first
- 9.0 Critical severity
Zowe: Execution with Unnecessary Privileges
A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by Zowe's client certificate. This allows access to a user to the endpoints requiring an internal client certificate without any credentials. It