IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Ibm
  • I

No data.

No data.

References
Link Providers
https://www.ibm.com/support/pages/node/7179509 cve-icon cve-icon
History

Sat, 21 Dec 2024 14:00:00 +0000

Type Values Removed Values Added
Description IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Title IBM i server-side request forgery
First Time appeared Ibm
Ibm i
Weaknesses CWE-918
CPEs cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm i
References
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2024-12-21T13:46:01.436Z

Updated: 2024-12-21T13:46:01.436Z

Reserved: 2024-10-28T10:50:10.475Z

Link: CVE-2024-51463

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2024-12-21T14:15:21.453

Modified: 2024-12-21T14:15:21.453

Link: CVE-2024-51463

cve-icon Redhat

No data.