PT-2025-2404 · Ibm · Ibm Automation Decision Services

Published 2025-01-26 · Updated 2025-08-14 · CVE-2024-31906

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: IBM Automation Decision Services version 23.0.2

Description: The issue is related to the disclosure of information through browser caching. This can allow an attacker to gain unauthorized access to protected information. The problem arises because web pages can be stored locally and read by another user on the system.

Recommendations: For IBM Automation Decision Services version 23.0.2, consider clearing browser cache regularly to minimize the risk of information disclosure. As a temporary workaround, restrict access to sensitive information on shared systems until a patch is available.

Fix

Weakness Enumeration

CWE-525

Related Identifiers

BDU:2025-01213

CVE-2024-31906

Affected Products

Ibm Automation Decision Services

References · 9

• https://ibm.com/support/pages/node/7150662 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01213 · Security Note
• https://osv.dev/vulnerability/CVE-2024-31906 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-31906 · Security Note
• https://twitter.com/CVEnew/status/1883527886176432334 · Twitter Post
• https://t.me/cvenotify/108640 · Telegram Post
• https://t.me/cvedetector/16418 · Telegram Post
• https://t.me/cveNotify/132333 · Telegram Post
• https://twitter.com/CVETracker/status/1883606017419661499 · Twitter Post