Unknown · Apiml Spring Cloud Gateway · CVE-2024-6834
**Name of the Vulnerable Software and Affected Versions**
APIML Spring Cloud Gateway (affected versions not specified)
**Description**
A vulnerability in APIML Spring Cloud Gateway allows unauthorized access to endpoints that require an internal client certificate. This occurs because the gateway unexpectedly signs proxied requests with Zowe's client certificate, leveraging user privileges. As a result, an attacker can access and manage components, potentially handling the entire communication, including user credentials.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.