CVE-2024-49779: IBM OpenPages cross-site request forgery
IBM OpenPages could allow a remote attacker to bypass security restrictions, caused by improper validation and management of authentication cookies. By modifying the CSRF token and Session Id cookie parameters using the cookies of another user, a remote attacker could exploit this vulnerability to bypass security restrictions and gain unauthorized access to the vulnerable application
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49779?
CVE-2024-49779 has been classified as a high severity vulnerability due to its potential to allow remote attackers to bypass security restrictions.
How do I fix CVE-2024-49779?
To fix CVE-2024-49779, apply the latest patches available for IBM OpenPages and IBM OpenPages with Watson.
Which versions are affected by CVE-2024-49779?
CVE-2024-49779 affects IBM OpenPages up to version 9.0 and IBM OpenPages with Watson up to version 8.3.
Can CVE-2024-49779 be exploited remotely?
Yes, CVE-2024-49779 can be exploited remotely by attackers who manipulate authentication cookies.
What are the consequences of exploiting CVE-2024-49779?
Exploiting CVE-2024-49779 could allow unauthorized access and manipulation of sensitive user data.