CVE-2024-51448

Summary

IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.

Affected Software

VendorProductVersion RangeStatus
IBMRobotic Process Automation21.0.0 <= 21.0.7.17affected
IBMRobotic Process Automation23.0.0 <= 23.0.18affected

Weaknesses

  • CWE-277: CWE-277 Insecure Inherited Permissions

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References