CVE-2024-9798: Linuxfoundation Zowe API Mediation Layer

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The health endpoint is public so everybody can see a list of all services. It is potentially valuable information for attackers.

Affected products

• Linuxfoundation Zowe API Mediation Layer: from 1.0.0, before 1.28.8 (fixed in 1.28.8); from 2.0.0, before 2.18.0 (fixed in 2.18.0)

Published 2024-10-10. Last modified 2026-06-17.