Soar vulnerabilities

2 known vulnerabilities in Soar from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Security SOAR: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2024-45670Nov 14, 2024IBM

  IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowing the original password, but the user account must be compromised prior to the weak recovery mechanism.

• 8.8 High severity

  Security SOAR: Improper Control of Generation of Code

  CVE-2024-38319Jun 22, 2024IBM

  IBM Security SOAR 51.0.2.0 could allow an authenticated user to execute malicious code loaded from a specially crafted script. IBM X-Force ID: 294830.