IBMi Navigator 7.5 - HTTP Security Token Bypass

Author Title: John Page aka hyp3rlinx Author Website: hyp3rlinx.altervista.org Source: https://hyp3rlinx.altervista.org/advisories/IBMiNavigatorHTTPSecurityTokenBypass-CVE-2024-51464.txt Vendor: www.ibm.com Product Navigator for i is a Web console interface where you can perform the key tasks to...

CVE-2024-51464

IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to remotely perform operations that the user is not allowed to perform when using Navigator for i...

CVE-2024-51464 IBM i authentication bypass

IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to remotely perform operations that the user is not allowed to perform when using Navigator for i...

CVE-2024-51464

creationtimestamp| type| source ---|---|--- 2024-12-20 14:58:55+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3ldqnleusys2v 2024-12-21 13:51:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113691136161699105 2024-12-21 14:15:43+00:00| seen|...