Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-41779 EUVD-2024-39317GHSA-m7v8-cfx4-v2vg

IBM Engineering Systems Design Rhapsody - Model Manager

Published Nov 22, 2024 · Updated Nov 22, 2024 · Assigned by ibm

Description

IBM Engineering Systems Design Rhapsody - Model Manager 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.

Affected products

VendorProductAffectedFixed
IBM Engineering Systems Design Rhapsody - Model Manager 7.0.2, 7.0.3 —

References