CVEvulnerability

CVE-2024-49824

6.5 MEDIUM Published 2025-01-18 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-602

Description

IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.

Affected configurations

• ibm robotic process automation (>= 21.0.0 < 21.0.7.19) • ibm robotic process automation (>= 23.0.0 < 23.0.19) • ibm robotic process automation for cloud pak (>= 21.0.0 < 21.0.7.19) • ibm robotic process automation for cloud pak (>= 23.0.0 < 23.0.19)

Related

Weakness · CWE (1)

  • CWE-602 Client-Side Enforcement of Server-Side Security weakness

References