IBM License Metric Tool Access Control Bypass Vulnerability in REST API

An access control bypass vulnerability has been identified in the REST API of IBM License Metric Tool versions 9.2.0 through 9.2.40. This vulnerability allows authenticated users to circumvent access controls and execute unauthorized actions.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed via the REST API, potentially allowing users to manipulate data or application behavior inappropriately.

Remediation

Users are advised to upgrade to the latest version of IBM License Metric Tool, version 9.2.41 or later. Instructions for upgrading can be found in the IBM License Metric Tool documentation.