CVE-2024-23733: High severity webmethods vulnerability
The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before CoreFix7 allows remote attackers to reach the administration panel and discover hostname and version information by sending an arbitrary username and a blank password to the /WmAdmin/#/login/ URI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23733?
CVE-2024-23733 has been classified as a high-severity vulnerability due to its potential for unauthorized access to sensitive system information.
How do I fix CVE-2024-23733?
To fix CVE-2024-23733, it is recommended to apply Core_Fix7 or later updates for Software AG webMethods 10.15.0.
Who is affected by CVE-2024-23733?
CVE-2024-23733 affects users of Software AG webMethods version 10.15.0 and earlier versions without the latest patches.
What type of attack does CVE-2024-23733 enable?
CVE-2024-23733 enables remote attackers to gain access to the administration panel and extract sensitive hostname and version information.
What is the impact of CVE-2024-23733?
The impact of CVE-2024-23733 includes unauthorized exposure of sensitive system details, which could lead to further exploitation.