Description
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrator due to missing authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | webMethods Integration | 10.15 | — |
Advisories 1
- VA-24-254-01 IBM webMethods Integration Multiple Vulnerabilities CISA ICS & IT advisories · Sep 10, 2024
References
- https://www.ibm.com/support/pages/node/7167245 vendor-advisory patch