VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
249bc4cebedade5155d8eeefbac7a00eae5d85bc
vuln-cve/data/2025/2xxx/CVE-2025-2824.json
T

171 lines
8.9 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2025-2824",
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"state": "PUBLISHED",
"assignerShortName": "ibm",
"dateReserved": "2025-03-26T15:42:06.334Z",
"datePublished": "2025-08-01T17:46:30.472Z",
"dateUpdated": "2025-08-01T18:07:22.830Z"
},
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:operational_decision_manager:8.11.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:operational_decision_manager:8.11.1.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:operational_decision_manager:8.12.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:operational_decision_manager:9.0.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:operational_decision_manager:9.5.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "Operational Decision Manager",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "8.11.0.1"
},
{
"status": "affected",
"version": "8.11.1.0"
},
{
"status": "affected",
"version": "8.12.0.1"
},
{
"status": "affected",
"version": "9.0.0.1"
},
{
"status": "affected",
"version": "9.5.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim."
}
],
"value": "IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-601",
"description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm",
"dateUpdated": "2025-08-01T17:46:30.472Z"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7241286"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "<p>IBM Operational Decision Manager V8.11.0.1<br>Interim fix 046 is available, see <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/pages/node/7238508\">download document</a>.</p><p>IBM Operational Decision Manager V8.11.1:<br>Interim fix 044 is available, see <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/pages/node/7237139\">download document</a>.</p><p>IBM Operational Decision Manager V8.12.0.1:<br>Interim fix 028 is available, see <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/pages/node/7236479\">download document</a>.</p><p>IBM Operational Decision Manager V9.0.0.1:<br>Interim fix 011 is available, see <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/pages/node/7230722\">download document</a>.</p><p>&nbsp;IBM Operational Decision Manager V9.5.0.0:<br>Interim fix 002 is available, see <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.ibm.com/support/pages/node/7233740\">download document</a></p>\n\n<br>"
}
],
"value": "IBM Operational Decision Manager V8.11.0.1\nInterim fix 046 is available, see download document https://www.ibm.com/support/pages/node/7238508 .\n\nIBM Operational Decision Manager V8.11.1:\nInterim fix 044 is available, see download document https://www.ibm.com/support/pages/node/7237139 .\n\nIBM Operational Decision Manager V8.12.0.1:\nInterim fix 028 is available, see download document https://www.ibm.com/support/pages/node/7236479 .\n\nIBM Operational Decision Manager V9.0.0.1:\nInterim fix 011 is available, see download document https://www.ibm.com/support/pages/node/7230722 .\n\n IBM Operational Decision Manager V9.5.0.0:\nInterim fix 002 is available, see download document https://www.ibm.com/support/pages/node/7233740"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Operational Decision Manager HTTP open redirect",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2025-08-01T18:07:12.808015Z",
"id": "CVE-2025-2824",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2025-08-01T18:07:22.830Z"
}
}
]
}
}
View Git Blame Copy Permalink