CVE-2024-38998: Critical severity ibm planning analytics cloud vulnerability
jrburke requirejs could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution in the function config. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service.
Other sources
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38998?
CVE-2024-38998 has been classified with a high severity due to its potential to allow remote code execution.
How do I fix CVE-2024-38998?
To fix CVE-2024-38998, it is recommended to update IBM Planning Analytics to a version that is not vulnerable.
What software is affected by CVE-2024-38998?
CVE-2024-38998 affects IBM Planning Analytics versions up to and including 2.1 and 2.0.
Can CVE-2024-38998 lead to a denial of service?
Yes, CVE-2024-38998 can be exploited to cause a denial of service on affected systems.
What type of attack does CVE-2024-38998 facilitate?
CVE-2024-38998 allows remote attackers to execute arbitrary code through a prototype pollution vulnerability.