CVE-2024-51448: IBM Robotic Process Automation privilege escalation
IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.
Other sources
IBM Robotic Process Automation could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51448?
CVE-2024-51448 has been rated as a medium severity vulnerability due to its potential to allow local privilege escalation.
How do I fix CVE-2024-51448?
To mitigate CVE-2024-51448, ensure that file permissions are correctly configured to prevent non-privileged users from altering executable files.
Which versions of IBM Robotic Process Automation are affected by CVE-2024-51448?
CVE-2024-51448 affects IBM Robotic Process Automation versions from 21.0.0 to 21.0.7.17 and from 23.0.0 to 23.0.18.
What is the impact of CVE-2024-51448 on system security?
The impact of CVE-2024-51448 is that it allows a non-privileged user to potentially escalate their privileges through improper file permissions.
Can remote users exploit CVE-2024-51448?
CVE-2024-51448 can be exploited by local users rather than remote users, as it requires local access to the system.