PT-2025-1093 · Ibm · Ibm Engineering Lifecycle Optimization - Publishing

Published 2025-01-03 · Updated 2025-03-21 · CVE-2024-41766

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM Engineering Lifecycle Optimization - Publishing versions 7.0.2 through 7.0.3

Description The issue is related to the use of a regular expression with inefficient computational complexity in IBM Engineering Lifecycle Optimization - Publishing. This could allow a remote attacker to cause a denial of service using a complex regular expression.

Recommendations For versions 7.0.2 and 7.0.3, consider disabling the use of complex regular expressions until a patch is available. As a temporary workaround, restrict access to the affected module to minimize the risk of exploitation. Avoid using the vulnerable function related to regular expression processing in the affected software until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-1333

Related Identifiers

BDU:2025-00348

CVE-2024-41766

Affected Products

Ibm Engineering Lifecycle Optimization - Publishing

References · 9

• https://osv.dev/vulnerability/CVE-2024-41766 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00348 · Security Note
• https://ibm.com/support/pages/node/7180203 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41766 · Security Note
• https://t.me/cvenotify/106323 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1875583891601310077 · Twitter Post
• https://t.me/cvedetector/14286 · Telegram Post
• https://twitter.com/CVEnew/status/1875555357612785905 · Twitter Post
• https://t.me/cvenotify/115641 · Telegram Post