CVE-2024-45075

Name of the Vulnerable Software and Affected Versions IBM webMethods Integration version 10.15

Description The issue allows an authenticated user to create scheduler tasks, enabling them to escalate their privileges to administrator due to missing authentication. This can lead to unauthorized access and control.

Recommendations For IBM webMethods Integration version 10.15, consider disabling the scheduler task creation feature for authenticated users until a patch is available to prevent privilege escalation. Restrict access to the scheduler module to minimize the risk of exploitation.