← Back

CVE-2024-31897

nvd nist
Published: Jul 8, 2024Modified: Nov 21, 2024

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, 22.0.2, 23.0.1, and 23.0.2 vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 288178.

Affected (70)

1 product
Cloud Pak For Business Automation
Configuration A
70 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
From 18.0.0 to 18.0.2
From 19.0.1 to 19.0.3
From 20.0.1 to 20.0.3
Version 21.0.1
Version 21.0.1 interim_fix_001
Version 21.0.1 interim_fix_002
Version 21.0.1 interim_fix_003
Version 21.0.1 interim_fix_004
Version 21.0.1 interim_fix_005
Version 21.0.1 interim_fix_006
Version 21.0.1 interim_fix_007
Version 21.0.1 interim_fix_008
Version 21.0.3
Version 21.0.3 interim_fix_001
Version 21.0.3 interim_fix_002
Version 21.0.3 interim_fix_003
Version 21.0.3 interim_fix_004
Version 21.0.3 interim_fix_005
Version 21.0.3 interim_fix_006
Version 21.0.3 interim_fix_007
Version 21.0.3 interim_fix_008
Version 21.0.3 interim_fix_009
Version 21.0.3 interim_fix_010
Version 21.0.3 interim_fix_011
Version 21.0.3 interim_fix_012
Version 21.0.3 interim_fix_013
Version 21.0.3 interim_fix_014
Version 21.0.3 interim_fix_015
Version 21.0.3 interim_fix_016
Version 21.0.3 interim_fix_017
Version 21.0.3 interim_fix_018
Version 21.0.3 interim_fix_019
Version 21.0.3 interim_fix_020
Version 21.0.3 interim_fix_021
Version 21.0.3 interim_fix_022
Version 21.0.3 interim_fix_023
Version 21.0.3 interim_fix_024
Version 21.0.3 interim_fix_025
Version 21.0.3 interim_fix_026
Version 21.0.3 interim_fix_028
Version 21.0.3 interim_fix_029
Version 21.0.3 interim_fix_030
Version 21.0.3 interim_fix_031
Version 21.0.3 interim_fix_032
Version 21.0.3 interim_fix_033
Version 22.0.1
Version 22.0.1 interim_fix_001
Version 22.0.1 interim_fix_002
Version 22.0.1 interim_fix_003
Version 22.0.1 interim_fix_004
Version 22.0.1 interim_fix_005
Version 22.0.1 interim_fix_006
Version 22.0.2
Version 22.0.2 interim_fix_001
Version 22.0.2 interim_fix_002
Version 22.0.2 interim_fix_003
Version 22.0.2 interim_fix_004
Version 22.0.2 interim_fix_005
Version 22.0.2 interim_fix_006
Version 23.0.1
Version 23.0.1 interim_fix_001
Version 23.0.1 interim_fix_002
Version 23.0.1 interim_fix_003
Version 23.0.1 interim_fix_004
Version 23.0.2
Version 23.0.2 interim_fix_001
Version 23.0.2 interim_fix_002
Version 23.0.2 interim_fix_003
Version 23.0.2 interim_fix_004
Version 23.0.2 interim_fix_005

References (4)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.