CVE-2024-45075

IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrator due to missing authentication.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@us.ibm.com

Published

2024-09-04

Last modified

2025-09-29

Weaknesses

CWE-306

Affected products

• Webmethods Integration (Ibm)
• Webmethods (Softwareag)

References

• https://www.ibm.com/support/pages/node/7167245