IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain…

What to know

What it is

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 have a vulnerability that allows a remote attacker to obtain sensitive information due to binding to an unrestricted IP address. An attacker could exploit this to gain sensitive information.

Affected

{'products': ['IBM App Connect Enterprise'], 'packages': [], 'versions': ['13.0.1.0', '13.0.2.0', '13.0.3.0', '13.0.4.0', '13.0.5.0', '13.0.6.0', '13.0.7.0', '13.0.8.0', '13.0.8.1', '13.0.8.2']}

Fix

Check the linked advisory for a fix.

Exploitation

No known exploitation

Not confirmed. 13.0.2.0, 13.0.3.0, 13.0.4.0, 13.0.5.0, 13.0.6.0, 13.0.7.0, 13.0.8.0, 13.0.8.1 isn't in the advisory. Check the vendor's advisory before acting on this.