CVE-2024-51461 - Vulnerability Details - OpenCVE

IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	Qradar Wincollect

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7230614

History

Fri, 11 Apr 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 11 Apr 2025 01:45:00 +0000

Type	Values Removed	Values Added
Description		IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources.
Title		IBM QRadar WinCollect Agent denial of service
First Time appeared		Ibm Ibm qradar Wincollect
Weaknesses		CWE-770
CPEs		cpe:2.3:a:ibm:qradar_wincollect:10.0:::::::* cpe:2.3:a:ibm:qradar_wincollect:10.1.13:::::::*
Vendors & Products		Ibm Ibm qradar Wincollect
References		https://www.ibm.com/support/pages/node/7230614
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2025-04-11T01:13:57.207Z

Updated: 2025-04-11T16:03:01.802Z

Reserved: 2024-10-28T10:50:10.475Z

Link: CVE-2024-51461

Vulnrichment

Updated: 2025-04-11T16:00:52.388Z

NVD

Status : Awaiting Analysis

Published: 2025-04-11T02:15:17.250

Modified: 2025-04-11T15:39:52.920

Link: CVE-2024-51461

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-51461", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2024-10-28T10:50:10.475Z", "datePublished": "2025-04-11T01:13:57.207Z", "dateUpdated": "2025-04-11T16:03:01.802Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:ibm:qradar_wincollect:10.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:qradar_wincollect:10.1.13:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "QRadar WinCollect Agent", "vendor": "IBM", "versions": [{"lessThanOrEqual": "10.1.13", "status": "affected", "version": "10.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources."}], "value": "IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-770", "description": "CWE-770 Allocation of Resources Without Limits or Throttling", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-04-11T01:13:57.207Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/7230614"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM QRadar WinCollect Agent denial of service", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-11T16:00:42.996286Z", "id": "CVE-2024-51461", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-11T16:03:01.802Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-51461", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2024-10-28T10:50:10.475Z", "datePublished": "2025-04-11T01:13:57.207Z", "dateUpdated": "2025-04-11T16:03:01.802Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:ibm:qradar_wincollect:10.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:qradar_wincollect:10.1.13:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "QRadar WinCollect Agent", "vendor": "IBM", "versions": [{"lessThanOrEqual": "10.1.13", "status": "affected", "version": "10.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources."}], "value": "IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-770", "description": "CWE-770 Allocation of Resources Without Limits or Throttling", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-04-11T01:13:57.207Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/7230614"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM QRadar WinCollect Agent denial of service", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-51461", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-11T16:00:42.996286Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-11T16:00:52.388Z"}}]}}