IBM ApplinX Privilege Escalation Vulnerability via Improper JWT Token Verification

Vulnerability

A privilege escalation vulnerability has been identified in IBM ApplinX version 11.1. This issue arises from improper verification of JSON Web Tokens (JWT), allowing an attacker to craft or modify a token to impersonate another user or elevate their privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain elevated rights or access within the application.

Remediation

Users are advised to upgrade to IBM ApplinX version 11.1.0.8. The update can be downloaded from Fix Central.

Added: Jan 20, 2026, 4:49 PM
Updated: Jan 20, 2026, 4:49 PM

Vulnerability Rating

Custom Algorithm
spread
1.4
impact
7.5
exploitability
7.0
remediation
7.7
relevance
2.1
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.