Lucene search

IbmCVE-2024-45076

HistorySep 04, 2024 - 4:15 p.m.

CVE-2024-45076

2024-09-0416:15:08

CWE-434

ibm

web.nvd.nist.gov

ibm webmethods

integration

arbitrary files

authenticated user

operating system

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

20.0%

JSON

IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be executed on the underlying operating system.

Affected configurations

Nvd

Vulners

Node

ibmwebmethods_integrationMatch10.15

VendorProductVersionCPE
ibmwebmethods_integration10.15cpe:2.3:a:ibm:webmethods_integration:10.15:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	webmethods_integration	10.15	cpe:2.3:a:ibm:webmethods_integration:10.15:::::::*

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:softwareag:webmethods:10.15:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "webMethods Integration",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "10.15"
      }
    ]
  }
]

References

www.ibm.com/support/pages/node/7167245

CVSS3

9.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

20.0%

JSON

Related for CVE-2024-45076