CVE-2024-45075: IBM webMethods Integration privilege escalation
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrator due to missing authentication.
Other sources
IBM webMethods Integration could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrator due to missing authentication.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45075?
CVE-2024-45075 is considered a high-severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2024-45075?
To fix CVE-2024-45075, apply the latest security updates provided by IBM for webMethods Integration 10.15.
Who is affected by CVE-2024-45075?
CVE-2024-45075 affects authenticated users of IBM webMethods Integration version 10.15.
What type of vulnerability is CVE-2024-45075?
CVE-2024-45075 is a privilege escalation vulnerability caused by missing authentication in scheduler task creation.
Can CVE-2024-45075 be exploited remotely?
CVE-2024-45075 requires authentication, but it can still be exploited by authenticated users to escalate privileges.