Description
IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code in the context of SYSTEM. IBM X-Force ID: 279146.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Operational Decision Manager | 8.10.3 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- IBM Operational Decision Manager - Java Deserialization http/cves/2024/CVE-2024-22320.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- WID-SEC-2024-0241 IBM Operational Decision Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 29, 2024
References
- https://www.ibm.com/support/pages/node/7112382 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/279146 vdb-entry