Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

IBM App Connect Enterprise: Unauthorized Command Execution

CVE-2024-51465 · published 1 year ago
Summary

IBM App Connect Enterprise versions 11.4 to 12.3 include a weakness that allows a malicious user to execute unauthorized system commands remotely. If exploited, this could lead to system compromise and data theft. Update to the latest version to address this vulnerability.

What to do
  • Update ibm app_connect_enterprise_certified_container to version 12.4 or later.
Affected software
VendorProductAffected versions
ibm app_connect_enterprise_certified_container >= 11.4, < 12.4
cpe:2.3:a:ibm:app_connect_enterprise_certified_container:*:*:*:*:*:*:*:*
Original advisory text
IBM App Connect Enterprise Certified Container 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, and 12.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a spec...
IBM App Connect Enterprise Certified Container 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, and 12.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published4 Dec 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-51465 · NVD
Track software like this
Free during beta