CVE-2024-49824: IBM Robotic Process Automation security bypass
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18
could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.
Other sources
IBM Robotic Process Automation could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49824?
CVE-2024-49824 has been classified as a significant vulnerability due to its potential for privileged user actions.
How do I fix CVE-2024-49824?
To remediate CVE-2024-49824, upgrade IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak to versions beyond 21.0.7.18 and 23.0.18.
Who is affected by CVE-2024-49824?
CVE-2024-49824 affects users of IBM Robotic Process Automation versions 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18.
What type of vulnerability is CVE-2024-49824?
CVE-2024-49824 is a privilege escalation vulnerability that allows authenticated users to perform unauthorized actions.
Is authentication required to exploit CVE-2024-49824?
Yes, CVE-2024-49824 requires an authenticated user to exploit the vulnerability.