Medium severity5.3NVD Advisory· Published Oct 10, 2024· Updated Jun 17, 2026
CVE-2024-9802
CVE-2024-9802
Description
The conformance validation endpoint is public so everybody can verify the conformance of onboarded services. The response could contain specific information about the service, including available endpoints, and swagger. It could advise about the running version of a service to an attacker. The attacker could also check if a service is running.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:linuxfoundation:zowe_api_mediation_layer:*:*:*:*:*:*:*:*Range: >=2.11.0,<2.17.0
- Open Mainframe Project/Zowev5Range: 2.11.0
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.