Lucene search
HistoryJul 08, 2024 - 3:15 a.m.
CVE-2024-31897
ibm
cloud pak
business automation
ssrf
vulnerable
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
13.4%
IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 288178.
Affected configurations
Node
ibmcloud_pak_for_business_automationRange18.0.0–18.0.2
ORibmcloud_pak_for_business_automationRange19.0.1–19.0.3
ORibmcloud_pak_for_business_automationRange20.0.1–20.0.3
ORibmcloud_pak_for_business_automationMatch21.0.1-
ORibmcloud_pak_for_business_automationMatch21.0.1interim_fix_001
ORibmcloud_pak_for_business_automationMatch21.0.1interim_fix_002
ORibmcloud_pak_for_business_automationMatch21.0.1interim_fix_003
ORibmcloud_pak_for_business_automationMatch21.0.1interim_fix_004
ORibmcloud_pak_for_business_automationMatch21.0.1interim_fix_005
ORibmcloud_pak_for_business_automationMatch21.0.1interim_fix_006
ORibmcloud_pak_for_business_automationMatch21.0.1interim_fix_007
ORibmcloud_pak_for_business_automationMatch21.0.1interim_fix_008
ORibmcloud_pak_for_business_automationMatch21.0.3-
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_001
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_002
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_003
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_004
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_005
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_006
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_007
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_008
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_009
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_010
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_011
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_012
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_013
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_014
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_015
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_016
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_017
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_018
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_019
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_020
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_021
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_022
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_023
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_024
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_025
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_026
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_028
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_029
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_030
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_031
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_032
ORibmcloud_pak_for_business_automationMatch21.0.3interim_fix_033
ORibmcloud_pak_for_business_automationMatch22.0.1-
ORibmcloud_pak_for_business_automationMatch22.0.1interim_fix_001
ORibmcloud_pak_for_business_automationMatch22.0.1interim_fix_002
ORibmcloud_pak_for_business_automationMatch22.0.1interim_fix_003
ORibmcloud_pak_for_business_automationMatch22.0.1interim_fix_004
ORibmcloud_pak_for_business_automationMatch22.0.1interim_fix_005
ORibmcloud_pak_for_business_automationMatch22.0.1interim_fix_006
ORibmcloud_pak_for_business_automationMatch22.0.2-
ORibmcloud_pak_for_business_automationMatch22.0.2interim_fix_001
ORibmcloud_pak_for_business_automationMatch22.0.2interim_fix_002
ORibmcloud_pak_for_business_automationMatch22.0.2interim_fix_003
ORibmcloud_pak_for_business_automationMatch22.0.2interim_fix_004
ORibmcloud_pak_for_business_automationMatch22.0.2interim_fix_005
ORibmcloud_pak_for_business_automationMatch22.0.2interim_fix_006
ORibmcloud_pak_for_business_automationMatch23.0.1-
ORibmcloud_pak_for_business_automationMatch23.0.1interim_fix_001
ORibmcloud_pak_for_business_automationMatch23.0.1interim_fix_002
ORibmcloud_pak_for_business_automationMatch23.0.1interim_fix_003
ORibmcloud_pak_for_business_automationMatch23.0.1interim_fix_004
ORibmcloud_pak_for_business_automationMatch23.0.2-
ORibmcloud_pak_for_business_automationMatch23.0.2interim_fix_001
ORibmcloud_pak_for_business_automationMatch23.0.2interim_fix_002
ORibmcloud_pak_for_business_automationMatch23.0.2interim_fix_003
ORibmcloud_pak_for_business_automationMatch23.0.2interim_fix_004
ORibmcloud_pak_for_business_automationMatch23.0.2interim_fix_005
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | cloud_pak_for_business_automation | * | cpe:2.3:a:ibm:cloud_pak_for_business_automation:*:*:*:*:*:*:*:* |
| ibm | cloud_pak_for_business_automation | 21.0.1 | cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:-:*:*:*:*:*:* |
| ibm | cloud_pak_for_business_automation | 21.0.1 | cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_001:*:*:*:*:*:* |
| ibm | cloud_pak_for_business_automation | 21.0.1 | cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_002:*:*:*:*:*:* |
| ibm | cloud_pak_for_business_automation | 21.0.1 | cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_003:*:*:*:*:*:* |
| ibm | cloud_pak_for_business_automation | 21.0.1 | cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_004:*:*:*:*:*:* |
| ibm | cloud_pak_for_business_automation | 21.0.1 | cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_005:*:*:*:*:*:* |
| ibm | cloud_pak_for_business_automation | 21.0.1 | cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_006:*:*:*:*:*:* |
| ibm | cloud_pak_for_business_automation | 21.0.1 | cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_007:*:*:*:*:*:* |
| ibm | cloud_pak_for_business_automation | 21.0.1 | cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_008:*:*:*:*:*:* |
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
13.4%
Related for NVD:CVE-2024-31897