CVE-2024-22320: IBM Operational Decision Manager code execution
IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code in the context of SYSTEM. IBM X-Force ID: 279146.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22320?
CVE-2024-22320 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2024-22320?
To fix CVE-2024-22320, upgrade IBM Operational Decision Manager to a patched version after 8.12.0.1.
Who is affected by CVE-2024-22320?
CVE-2024-22320 affects all versions of IBM Operational Decision Manager up to and including 8.12.0.1.
What type of vulnerability is CVE-2024-22320?
CVE-2024-22320 is an unsafe deserialization vulnerability that allows for arbitrary code execution.
Can CVE-2024-22320 be exploited remotely?
Yes, CVE-2024-22320 can be exploited remotely by authenticated attackers.