CVE-2024-51463

MEDIUM

I - SSRF

Title source: rule

Description

IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Exploits (1)

exploitdb WRITEUP

by hyp3rlinx · textwebappsmultiple

https://www.exploit-db.com/exploits/52212

View Code ZIP pw:eip

References (2)

[Vendor Advisory] https://www.ibm.com/support/pages/node/7179509

[Mailing List] http://seclists.org/fulldisclosure/2024/Dec/19

Scores

CVSS v3 5.4

EPSS 0.0115

EPSS Percentile 78.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Details

CWE

CWE-918

Status published

Products (3)

ibm/i 7.3

ibm/i 7.4

ibm/i 7.5

Published Dec 21, 2024

Tracked Since Feb 18, 2026