IBM OpenPages Vulnerability Let Attackers Steal Authentication Credentials

IBM has addressed multiple high-severity vulnerabilities in its OpenPages Governance, Risk, and Compliance (GRC) platform that could enable attackers to hijack user sessions, steal authentication credentials, and manipulate critical enterprise data. The flaws affect versions 8.3 and 9.0 of the software, with fixes released in February 2025 through Fix Pack 5 for v9.0 and interim […] The post IBM OpenPages Vulnerability Let Attackers Steal Authentication Credentials appeared first on Cyber Security News.

Feb 21, 2025 - 04:33

IBM OpenPages Vulnerability Let Attackers Steal Authentication Credentials

IBM has addressed multiple high-severity vulnerabilities in its OpenPages Governance, Risk, and Compliance (GRC) platform that could enable attackers to hijack user sessions, steal authentication credentials, and manipulate critical enterprise data.

The flaws affect versions 8.3 and 9.0 of the software, with fixes released in February 2025 through Fix Pack 5 for v9.0 and interim patches for v8.3.

Exploitation Pathways and Technical Impact

Among the 10+ documented CVEs, CVE-2024-45613 (CVSS 7.2) in the integrated CKEditor 5 component enables cross-site scripting (XSS) via malicious clipboard content.

This allows session cookie theft by injecting JavaScript payloads into administrative interfaces.

Attackers could combine this with CVE-2024-49779 (CVSS 4.3), which bypasses CSRF protections by swapping session IDs and anti-CSRF tokens between accounts, enabling lateral movement across privileged roles.

The platform’s email notification system introduces two attack vectors:

CVE-2024-49337 (CVSS 5.4): HTML injection in workflow-triggered emails permits phishing payloads using