CVE-2024-22319: IBM Operational Decision Manager JDNI injection
IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 279145.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22319?
CVE-2024-22319 is characterized as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-22319?
To remediate CVE-2024-22319, update IBM Operational Decision Manager to a patched version as specified in the vendor's guidance.
What versions of IBM Operational Decision Manager are affected by CVE-2024-22319?
CVE-2024-22319 impacts IBM Operational Decision Manager versions 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, and 8.12.0.1.
What type of attacks does CVE-2024-22319 allow?
CVE-2024-22319 allows for remote code execution attacks via JNDI injection when unchecked arguments are passed to a specific API.
Is it safe to use IBM Operational Decision Manager if I have CVE-2024-22319?
Using IBM Operational Decision Manager with CVE-2024-22319 without applying the necessary patches poses a significant security risk.