Skip to content
OpenAdvisories
High · 8.5 CVE-2024-52899 EUVD-2024-46058GHSA-3qrf-2xj8-m9mv

IBM Data Virtualization Manager code execution

Published Nov 26, 2024 · Updated Nov 26, 2024 · Assigned by ibm

Description

IBM Data Virtualization Manager for z/OS 1.1 and 1.2 could allow an authenticated user to inject malicious JDBC URL parameters and execute code on the server.

Affected products

VendorProductAffectedFixed
IBM Data Virtualization Manager for z/OS 1.1, 1.2 —

References