CVE-2024-47120

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their privileges and attack surface on the host due to the containers running with unnecessary privileges.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-250

Affected software

No affected versions have been published.

Timeline

Published: Sep 10, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-471215.3The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted encryption key is cap CVE-2024-471226.5In the goTenna Pro App, the encryption keys are stored along with a static IV on the End User Device (EUD). This allows for complete decry CVE-2024-471233.1The goTenna Pro App uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms. This CVE-2024-471246.5The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in callsigns when using thi CVE-2024-471255.4The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to upd CVE-2024-471268.8The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random function in use makes it CVE-2024-471273.1In the goTenna Pro App there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a softw CVE-2024-471284.3The goTenna Pro App encryption key name is always sent unencrypted when the key is shared over RF through a broadcast message. It is advise CVE-2024-471294.3The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to CVE-2024-47136.1A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerabi CVE-2024-471306.5The goTenna Pro App allows unauthenticated attackers to remotely update the local public keys used for P2P and group messages. It is advise CVE-2024-471317.8If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer over