HTTP: IBM Operational Decision Manager datasource JNDI Injection
This signature detects attempts to exploit a known vulnerability against IBM Operational Decision Manager. A successful attack can lead to arbitrary code execution.
Extended Description
IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 279145.
Affected Products
Ibm operational_decision_manager
Short Name
HTTP:CTS:IBM-DEC-MNGR-JNDI-INJ
Severity
Critical
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2024-22319 Decision IBM Injection JNDI Manager Operational datasource
Release Date
04/30/2024
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3700
False Positive
Unknown
Vendors
Ibm