← All advisories

Medium severity4.9NVD Advisory· Published Sep 18, 2024· Updated Jun 17, 2026

CVE-2024-43188

CVE-2024-43188

Description

IBM Business Automation Workflow

22.0.2, 23.0.1, 23.0.2, and 24.0.0

could allow a privileged user to perform unauthorized activities due to improper client side validation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10

IBM/Business Automation Workflowllm-fuzzy10 versions
22.0.2, 23.0.1, 23.0.2, and 24.0.0+ 9 more
- (no CPE)range: 22.0.2, 23.0.1, 23.0.2, and 24.0.0
- cpe:2.3:a:ibm:business_automation_workflow:22.0.2:*:*:*:-:*:*:*range: 22.0.2, 23.0.1, 23.0.2, 24.0.0
- cpe:2.3:a:ibm:business_automation_workflow:*:*:*:*:traditional:*:*:*range: >=18.0.0.1,<=18.0.0.3
- cpe:2.3:a:ibm:business_automation_workflow:20.0.0.1:*:*:*:traditional:*:*:*
- cpe:2.3:a:ibm:business_automation_workflow:20.0.0.2:*:*:*:traditional:*:*:*
- cpe:2.3:a:ibm:business_automation_workflow:22.0.1:*:*:*:traditional:*:*:*
- cpe:2.3:a:ibm:business_automation_workflow:22.0.2:*:*:*:traditional:*:*:*
- cpe:2.3:a:ibm:business_automation_workflow:23.0.1:*:*:*:traditional:*:*:*
- cpe:2.3:a:ibm:business_automation_workflow:23.0.2:*:*:*:traditional:*:*:*
- cpe:2.3:a:ibm:business_automation_workflow:24.0.0:*:*:*:traditional:*:*:*

Patches

Vulnerability mechanics

References

1

www.ibm.com/support/pages/node/7168769nvdVendor Advisory

News mentions

0

No linked articles in our index yet.