CVE-2024-22320 IBM Operational Decision Manager code execution
Remote authenticated attackers can execute arbitrary code with SYSTEM privileges via unsafe deserialization in IBM Operational Decision Manager.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-22320?
CVE-2024-22320 is a critical unsafe deserialization vulnerability in IBM Operational Decision Manager, published on 2 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code in the context of SYSTEM. IBM X-Force ID: 279146.
Weakness: CWE-502
Which versions are affected by CVE-2024-22320?
It affects 1 product.
Products include Ibm Operational Decision Manager.
How do I fix CVE-2024-22320?
No fix has been published for CVE-2024-22320 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2024-22320 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-22320 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in IBM Operational Decision Manager
- CVE-2024-22319 IBM Operational Decision Manager JDNI injection
- CVE-2025-2824 IBM Operational Decision Manager HTTP open redirect
- CVE-2018-1821 XML external entity in Operational Decision Management
- CVE-2025-1551 IBM Operational Decision Manager cross-site scripting
- CVE-2014-0944 Cross-site request forgery in n/a
Sources
Also known as GHSA-5pq5-cp3w-7chj.