PT-2024-34641 · Ibm · Ibm App Connect Enterprise Certified Container

Published 2024-12-04 · Updated 2025-08-14 · CVE-2024-51465

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise Certified Container versions 11.4 through 12.3

Description The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. This could potentially lead to remote code execution.

Recommendations For IBM App Connect Enterprise Certified Container versions 11.4 through 12.3, consider disabling the functionality that allows remote command execution until a patch is available. Restrict access to the system to minimize the risk of exploitation. Apply the patch provided by IBM as soon as it is available to fix the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-51465

Affected Products

Ibm App Connect Enterprise Certified Container

References · 11

• https://osv.dev/vulnerability/CVE-2024-51465 · Vendor Advisory
• https://ibm.com/support/pages/node/7177814 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51465 · Security Note
• https://t.me/cvenotify/103009 · Telegram Post
• https://twitter.com/vuldb/status/1864396393596813710 · Twitter Post
• https://twitter.com/CveFindCom/status/1864317269272043695 · Twitter Post
• https://t.me/cvedetector/11990 · Telegram Post
• https://twitter.com/cracbot/status/1865999912598647035 · Twitter Post
• https://twitter.com/CCBalert/status/1864709102045102103 · Twitter Post
• https://t.me/cveNotify/132170 · Telegram Post
• https://twitter.com/CVEnew/status/1864317970454888804 · Twitter Post