Products
IBM Global Configuration Management
- 7.0.2
- 7.0.3
Source
psirt@us.ibm.com
Tags
CVE-2024-41773 details
Published : Aug. 20, 2024, 8:15 p.m.
Last Modified : Aug. 20, 2024, 8:15 p.m.
Last Modified : Aug. 20, 2024, 8:15 p.m.
Description
IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6.5 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-708 | Incorrect Ownership Assignment | The product assigns an owner to a resource, but the owner is outside of the intended control sphere. |
CVSS Data
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Base Score
6.5
Exploitability Score
2.8
Impact Score
3.6
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
References
| URL | Source |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/350347 | psirt@us.ibm.com |
| https://www.ibm.com/support/pages/node/7165963 | psirt@us.ibm.com |
This website uses the NVD API, but is not approved or certified by it.