CVEvulnerability

CVE-2024-45075

8.8 HIGH Published 2024-09-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-09-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-306

Description

IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrator due to missing authentication.

Affected configurations

• ibm webmethods integration 10.15

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References