CVE-2024-22320

Name of the Vulnerable Software and Affected Versions IBM Operational Decision Manager versions 8.10.3 through 8.12.0.1

Description The issue is caused by an unsafe deserialization, allowing a remote authenticated attacker to execute arbitrary code on the system by sending a specially crafted request. This could enable the attacker to execute arbitrary code in the context of SYSTEM.

Recommendations For IBM Operational Decision Manager versions 8.10.3 through 8.12.0.1, update to a version that includes the fix for the unsafe deserialization vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.