PT-2024-10217 · Ibm · Ibm Security Reaqta

Ben Goodspeed + 9 · Published 2024-01-07 · Updated 2025-01-07 · CVE-2024-45100

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM Security ReaQta version 3.12

Description The issue is related to improper allocation of resources, which could allow a privileged user to cause a denial of service by sending multiple administration requests. This could potentially be exploited by a remote attacker to disrupt service.

Recommendations For IBM Security ReaQta version 3.12, consider restricting the ability to send multiple administration requests to prevent denial of service attacks. As a temporary workaround, limit the allocation of resources to prevent improper use. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2025-00547

CVE-2024-45100

Affected Products

Ibm Security Reaqta

References · 6

• https://osv.dev/vulnerability/CVE-2024-45100 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45100 · Security Note
• https://ibm.com/support/pages/node/7180313 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00547 · Security Note
• https://twitter.com/CVEnew/status/1876614715788710072 · Twitter Post
• https://t.me/cvedetector/14540 · Telegram Post