CVE-2024-43188

Опубликовано: 18 сент. 2024

Источник: nvd

CVSS3: 4.9

EPSS Низкий

Описание

IBM Business Automation Workflow

22.0.2, 23.0.1, 23.0.2, and 24.0.0

could allow a privileged user to perform unauthorized activities due to improper client side validation.

Ссылки

https://www.ibm.com/support/pages/node/7168769
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:*

Версия от 18.0.0.1 (включая) до 18.0.0.3 (включая)

cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:*

Версия от 19.0.0.1 (включая) до 19.0.0.3 (включая)

cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:*

Версия от 21.0.1 (включая) до 21.0.3.1 (включая)

cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:traditional:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:traditional:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:22.0.1:*:*:*:traditional:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:22.0.2:*:*:*:traditional:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:23.0.1:*:*:*:traditional:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:23.0.2:*:*:*:traditional:*:*:*

cpe:2.3:a:ibm:business_automation_workflow:24.0.0:*:*:*:traditional:*:*:*

EPSS

Процентиль: 25%

0.00085

Низкий

4.9 Medium

CVSS3

Дефекты

CWE-602

NVD-CWE-Other

Связанные уязвимости

GHSA-m58v-fvm4-hcrr

CVSS3: 4.9

github

больше 1 года назад

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation.

EPSS

Процентиль: 25%

0.00085

Низкий

4.9 Medium

CVSS3

Дефекты

CWE-602

NVD-CWE-Other