8.8
CVE-2024-45075
- EPSS 0.16%
- Veröffentlicht 04.09.2024 16:15:08
- Zuletzt bearbeitet 29.09.2025 18:15:30
- Quelle psirt@us.ibm.com
- Teams Watchlist Login
- Unerledigt Login
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrator due to missing authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Webmethods Integration Version10.15
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.37 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@us.ibm.com | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-306 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.