CVE-2024-51465

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Dec 4, 2024
CWE ID 78

Summary

CVE-2024-51465 is a new vulnerability affecting IBM App Connect Enterprise Certified Containers, specifically versions 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, and 12.3. This issue allows a remote, authenticated attacker to execute arbitrary commands on the system by sending a carefully crafted request. Successful exploitation could lead to significant security implications, including unauthorized system access and data manipulation. IBM strongly recommends users to apply available patches or updates to mitigate this risk. Organizations should also review their security policies and access control measures to minimize potential exposure.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share