CVE-2024-43188 MEDIUM

CVE-2024-43188: IBM Business Automation Workflow improper input validation

Vendor Ibm
Product Business Automation Workflow
Weakness CWE-602 · Client-side enforcement
Published September 18, 2024
Last update September 18, 2024
View on NVD All CVEs

CVSS base score

4.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation.

Key dates

02Disclosure timeline

September 18, 2024 CVE published
September 18, 2024 Record updated