IBM Security SOAR Vulnerability Could Allow Execution of Malicious Code
CVE-2024-38319
7.5HIGH
Summary
IBM Security SOAR version 51.0.2.0 contains a vulnerability that permits an authenticated user to execute malicious code from a specially crafted script. This flaw poses serious security risks, as it enables potential attackers to manipulate or compromise the system by leveraging the capabilities of logged-in users. Organizations using this software should evaluate their risk exposure and consider implementing necessary security measures to mitigate the impact of this vulnerability. For further details, refer to IBM's vendor advisory and the X-Force vulnerability database entry.
Affected Version(s)
Security SOAR 51.0.2.0
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Julien Champoux