VULNERABILITY INTELLIGENCE

CVE-2024-43188

CVSS score4.9 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2024-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Description

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation.

Weakness classification

  • psirt@us.ibm.com: CWE-602
  • nvd@nist.gov: NVD-CWE-Other

Primary references