PT-2025-23619 · Ibm · Ibm Application Gateway
CVE-2024-45655
·
Published
2025-06-03
·
Updated
2025-08-12
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Application Gateway versions 19.12 through 24.09
Description
The issue allows a local privileged user to perform unauthorized actions due to incorrect permissions assignment.
Recommendations
For IBM Application Gateway versions 19.12 through 24.09, update to a version that correctly assigns permissions to prevent unauthorized actions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
LPE
Incorrect Permission
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Application Gateway