CVE-2024-45654: IBM Security ReaQta improper input validation

Q: What is the severity of CVE-2024-45654?

CVE-2024-45654 has a high severity rating due to the potential for unauthorized actions by authenticated users.

Q: How do I fix CVE-2024-45654?

To fix CVE-2024-45654, update IBM Security ReaQta to the latest version that addresses the vulnerability.

Q: Who is affected by CVE-2024-45654?

CVE-2024-45654 affects users of IBM Security ReaQta version 3.12 and earlier.

Q: What kind of unauthorized actions can CVE-2024-45654 allow?

CVE-2024-45654 can allow authenticated users to perform actions they should not be permitted to do due to input validation issues.

Q: Is authentication required to exploit CVE-2024-45654?

Yes, exploitation of CVE-2024-45654 requires an authenticated user to perform unauthorized actions.

Published Nov 7, 2024

Updated

IBM Security ReaQta 3.12 could allow an authenticated user to perform unauthorized actions due to reliance on untrusted inputs.

Other sources

IBM Security ReaQta could allow an authenticated user to perform unauthorized actions due to reliance on untrusted inputs.

— IBM

Affected Software

3 affected components

IBM Security QRadar EDR<=3.12

All of the following

IBM Security QRadar EDR>=3.12<3.12.13

Linux Linux kernel

Event History

Nov 7, 2024

CVE Published

via IBM·12:00 AM

Jan 19, 2025

CVE Published

via MITRE·02:19 AM

Data Sourced

via MITRE·02:19 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7175072

Frequently Asked Questions

What is the severity of CVE-2024-45654?

CVE-2024-45654 has a high severity rating due to the potential for unauthorized actions by authenticated users.

How do I fix CVE-2024-45654?

To fix CVE-2024-45654, update IBM Security ReaQta to the latest version that addresses the vulnerability.

Who is affected by CVE-2024-45654?