SB2023042748 - App Connect Enterprise Certified Container update for vm2
Published: April 27, 2023 Updated: May 17, 2023
Security Bulletin ID
SB2023042748
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper Control of Dynamically-Managed Code Resources (CVE-ID: CVE-2023-29199)
The vulnerability allows a remote user to gain access to sensitive information.
The vulnerability exists due to an error within the source code transformer. A remote user can bypass handleException() and leak unsanitized host exceptions. The obtain information can be used to escape the sandbox and run arbitrary code in host context.
Remediation
Install update from vendor's website.