CVE-2024-43188 | THREATINT

Description

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation.

Reserved 2024-08-07 | Published 2024-09-18 | Updated 2024-09-18 | Assigner ibm

MEDIUM: 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Problem types

CWE-602 Client-Side Enforcement of Server-Side Security

Product status

Default status

unaffected

22.0.2, 23.0.1, 23.0.2, 24.0.0

affected

References

www.ibm.com/support/pages/node/7168769 vendor-advisory

cve.org (CVE-2024-43188)

nvd.nist.gov (CVE-2024-43188)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.