← Back

CVE-2024-41751

nvd nist
Published: Jul 23, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 1.8 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local, authenticated attacker to bypass client-side enforcement of security to manipulate data.

Affected (6)

Ibm
1 product
Smartcloud Analytics Log Analysis
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Smartcloud Analytics Log Analysis
Version 1.3.7.0
Smartcloud Analytics Log Analysis
Version 1.3.7.1
Smartcloud Analytics Log Analysis
Version 1.3.7.2
Smartcloud Analytics Log Analysis
Version 1.3.8.0
Smartcloud Analytics Log Analysis
Version 1.3.8.1
Smartcloud Analytics Log Analysis
Version 1.3.8.2

Related CWEs

CWE-602
Client-Side Enforcement of Server-Side Security
The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.