CVE-2024-49824mediumCWE-602

CVE-2024-49824: medium-severity vulnerability in IBM Robotic Process Automation

IBM Robotic Process Automation security bypass

Published · Updated

Follow this CVE+ Monitor Robotic Process Automation+ Monitor Robotic Process Automation for Cloud Pak

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.3%
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
IBM · Robotic Process AutomationIBM · Robotic Process Automation for Cloud Pak
Related CVEs — IBM Robotic Process Automation

In the same product, most dangerous first.

CVE-2022-22413MEDIUMCVE-2022-22413EPSS 1.3%CVE-2022-22433LOWCVE-2022-22433EPSS 1.0%CVE-2022-22319MEDIUMCVE-2022-22319EPSS 1.0%CVE-2022-30616HIGHCVE-2022-30616EPSS 1.0%CVE-2022-22505MEDIUMCVE-2022-22505EPSS 0.9%CVE-2022-39168MEDIUMCVE-2022-39168EPSS 0.9%