CVE-2024-49824: IBM Robotic Process Automation security bypass
First published: Mon Dec 02 2024(Updated: )
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 could allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Robotic Process Automation for Cloud Pak | <=21.0.0 - 21.0.7.18, 23.0.0 - 23.0.18 | |
| IBM Robotic Process Automation for Services | <=21.0.0 - 21.0.7.18, 23.0.0 - 23.0.18 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-49824?
CVE-2024-49824 has been classified as a significant vulnerability due to its potential for privileged user actions.
How do I fix CVE-2024-49824?
To remediate CVE-2024-49824, upgrade IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak to versions beyond 21.0.7.18 and 23.0.18.
Who is affected by CVE-2024-49824?
CVE-2024-49824 affects users of IBM Robotic Process Automation versions 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18.
What type of vulnerability is CVE-2024-49824?
CVE-2024-49824 is a privilege escalation vulnerability that allows authenticated users to perform unauthorized actions.
Is authentication required to exploit CVE-2024-49824?
Yes, CVE-2024-49824 requires an authenticated user to exploit the vulnerability.
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/severity
- agent/author
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm robotic process automation for cloud pak
- version/ibm robotic process automation for cloud pak/21.0.0 - 21.0.7.18, 23.0.0 - 23.0.18
- canonical/ibm robotic process automation for services
- version/ibm robotic process automation for services/21.0.0 - 21.0.7.18, 23.0.0 - 23.0.18