CVE-2024-51464 in IBM

Résumé

par MITRE • 21/12/2024

IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to remotely perform operations that the user is not allowed to perform when using Navigator for i.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Ibm
• Réserver: 28/10/2024
• Divulgation: 21/12/2024
• Modérer: accepté
• Entrée: VDB-289160
• CPE: prêt
• CWE: CWE-288 (confirmé)
• Exploitation: Télécharger
• CVSS: 4.3 (CNA)
• EPSS: 0.01445
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-51464
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-51464
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-51464/