Analysis Summary

CVE-2024-56347 CVSS:9.6

IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote malicious user to execute arbitrary commands due to improper process controls.

CVE-2024-56346 CVSS:10

IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote malicious user to execute arbitrary commands due to improper process controls.

CVE-2024-49822 CVSS:4.1

IBM QRadar Advisor 1.0.0 up to and including 2.6.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated malicious user to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Impact

• Gain Access

Indicators of Compromise

CVE

• CVE-2024-56347

• CVE-2024-56346

• CVE-2024-49822

Affected Vendors

Remediation

Refer to IBM Security Advisory for patch, upgrade, or suggested workaround information.

CVE-2024-56347

CVE-2024-56346

CVE-2024-49822