CVE-2024-22320 Scanner

IBM Operational Decision Manager is a business rule management system that allows businesses to define, automate, and deploy decision logic. It is widely used by enterprises to improve operational efficiency and decision-making processes. IBM Operational Decision Manager provides a comprehensive platform for modeling, simulating, testing, and deploying business rules and events in a production environment, enabling organizations to quickly respond to changing business requirements and market conditions.

The vulnerability detected in IBM Operational Decision Manager versions 8.10.3 through 8.12.0.1 is a Java deserialization flaw. This vulnerability allows a remote authenticated attacker to execute arbitrary code on the system by sending specially crafted requests. Successful exploitation of this vulnerability could lead to the execution of arbitrary code in the context of the SYSTEM user, posing a significant security risk to affected systems.

The vulnerability resides in the '/res/login.jsf' endpoint of IBM Operational Decision Manager, where it fails to properly handle deserialized Java objects. By crafting a specially crafted request with a malicious Java gadget, an attacker can trigger the deserialization of untrusted data, leading to remote code execution. The vulnerable parameter 'javax.faces.ViewState' is exploited to inject the malicious gadget, allowing the attacker to execute arbitrary code on the target system.

Exploiting this vulnerability allows attackers to execute arbitrary code on the target system, potentially leading to complete compromise of the affected environment. Attackers can gain unauthorized access, manipulate sensitive data, disrupt business operations, and launch further attacks against other systems or networks. The exploitation of this vulnerability poses a significant risk to the confidentiality, integrity, and availability of the affected systems and data.

By leveraging the security scanning capabilities of the S4E platform, you can identify critical vulnerabilities like Java Deserialization in IBM Operational Decision Manager before they are exploited by malicious actors. Join our platform to proactively protect your business-critical applications and ensure the security of your organization's decision-making processes.

References

• https://labs.watchtowr.com/double-k-o-rce-in-ibm-operation-decision-manager/
• https://nvd.nist.gov/vuln/detail/CVE-2024-22320