PT-2025-11676 · Ibm · Ibm Security Reaqta

Published 2025-03-19 · Updated 2025-03-19 · CVE-2024-45644

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Security ReaQta version 3.12

Description The issue allows a privileged user to upload or transfer files of dangerous types that can be automatically processed within the product's environment.

Recommendations For IBM Security ReaQta version 3.12, consider restricting the upload or transfer of files to prevent automatic processing of dangerous file types until a patch is available. As a temporary workaround, limit the privileges of users to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2025-06850

CVE-2024-45644

Affected Products

Ibm Security Reaqta

References · 9

• https://bdu.fstec.ru/vul/2025-06850 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-45644 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45644 · Vendor Advisory
• https://ibm.com/support/pages/node/7186613 · Patch, Vendor Advisory
• https://t.me/cvenotify/115316 · Telegram Post
• https://t.me/cvedetector/20635 · Telegram Post
• https://twitter.com/CVEnew/status/1902320927326793827 · Twitter Post
• https://twitter.com/WolfgangSesin/status/1902332382155264154 · Twitter Post
• https://t.me/cvetracker/19435 · Telegram Post