{"uuid": "78aed04f-625c-41b4-bd1e-9f42a09361bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49348", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5047", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-49348\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: IBM Cloud Pak for Business Automation\u00a018.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 \n\n\n\nallows restricting access to organizational data to valid contexts. The fact that tasks of type comment can be reassigned via API implicitly grants access to user queries in an unexpected context.\n\ud83d\udccf Published: 2025-02-05T11:30:05.572Z\n\ud83d\udccf Modified: 2025-02-22T21:00:11.012Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7182403", "creation_timestamp": "2025-02-22T21:25:47.000000Z"}