CVE-2024-54181 | THREATINT

Description

IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially crafted input, the user could exploit this vulnerability to execute arbitrary code on the system.

Reserved 2024-11-30 | Published 2024-12-30 | Updated 2024-12-30 | Assigner ibm

HIGH: 7.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status

unaffected

1.7.5

affected

References

www.ibm.com/support/pages/node/7179994

cve.org (CVE-2024-54181)

nvd.nist.gov (CVE-2024-54181)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.