IBM TRIRIGA Pre-Auth XSS Vulnerability (CVE-2024-25760) Advisory

Vulnerability Overview Vulnerability Title: IBM TRIRIGA - GWT Mock Authentication CVE ID: CVE-2024-25760 Description: IBM TRIRIGA allows unauthenticated attackers to execute arbitrary code within a browser, leading to a Cross-Site Scripting (XSS) vulnerability. CVSS Score: 8.8 (High) CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Scope of Impact Affected Product: IBM TRIRIGA Affected Versions: - 10.5.x - 10.6.x Remediation Remediation Recommendation: Customers and end users should apply the latest patch for IBM TRIRIGA 10.6.x. IBM will provide a patch to address this issue. Reference Links: - https://www.ibm.com/support/pages/ibm-security-bulletin - https://www.ibm.com/support/pages/node/7048321 Warnings and Mitigation Measures Notification Subscription: Subscribe to IBM Security Bulletins for the latest product support updates. Related Resources: - IBM Security Bulletins - IBM Security Response Center - IBM Security Response Blog Change History October 16, 2024: Updated the Mitigation Measures section October 14, 2024: Initial release Disclaimer The information in this security bulletin is based on the current state of IBM products or services and does not guarantee future versions or updates. IBM does not guarantee that the information in this security bulletin applies to all situations; users should independently assess risks and take appropriate measures. Additional Information Document ID: 7048321 Last Updated: October 16, 2024 Initial Release Date: October 14, 2024 --- Note: The page does not include specific POC code or exploit code.

Goal Reached Thanks to every supporter — we hit 100%!

IBM TRIRIGA Pre-Auth XSS Vulnerability (CVE-2024-25760) Advisory

More from this source