Deserialization of untrusted data

2024-02-0203:15:00

PRIOn knowledge base

www.prio-n.com

ibm

operational decision manager

vulnerability

deserialization

unsafe

remote attacker

arbitrary code

system

x-force

nvd

7.5 High

AI Score

Confidence

High

0.489 Medium

EPSS

Percentile

97.5%

JSON

IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, and 8.12.0.1 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code in the context of SYSTEM. IBM X-Force ID: 279146.

CPENameOperatorVersion
operational_decision_managereq8.10.3
operational_decision_managereq8.10.4
operational_decision_managereq8.10.5.1
operational_decision_managereq8.11
operational_decision_managereq8.11.0.1
operational_decision_managereq8.12.0.1

Name	Operator	Version
operational_decision_manager	eq	8.10.3
operational_decision_manager	eq	8.10.4
operational_decision_manager	eq	8.10.5.1
operational_decision_manager	eq	8.11
operational_decision_manager	eq	8.11.0.1
operational_decision_manager	eq	8.12.0.1