CVE-2024-54181

Summary

CVE-2024-54181 is a newly disclosed vulnerability affecting IBM WebSphere Automation version 1.7.5. A remote privileged user, granted access to the Swagger UI, can exploit this weakness to execute arbitrary code on the system. This issue poses a significant risk, as attackers could potentially gain full control of the vulnerable system and cause extensive damage. IBM has yet to release a patch for this vulnerability, leaving affected organizations vulnerable until a solution is made available. Organizations using IBM WebSphere Automation are urged to take immediate action to secure their systems and limit access to the Swagger UI as a precaution.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.