IBM i is Affected by Privilege Escalation []
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | i | affected |
|
Configuration 1 [-]
|
No data.
| Vendor | Product | Versions | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Ibm | I |
|
Vendor Solution
IBM i Release5770-SS1 PTF Number(s)PTF Download Link(s)7.6SJ09689 SJ09666 SJ10017 SJ09859 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09689 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09666 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10017 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09859 7.5SJ09688 SJ09665 SJ09699 SJ10015 SJ09855 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09688 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09665 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09699 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10015 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09855 7.4SJ09690 SJ09664 SJ09701 SJ10028 SJ09851 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09690 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09664 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09701 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10028 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09851 7.3SJ09691 SJ09663 SJ10018 SJ09837 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09691 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09663 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ10018 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ09837 IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.343% probability within 30 days)
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7275756 |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:* cpe:2.3:o:ibm:i:7.4:*:*:*:*:*:*:* cpe:2.3:o:ibm:i:7.5:*:*:*:*:*:*:* cpe:2.3:o:ibm:i:7.6:*:*:*:*:*:*:* |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege. | |
| Title | IBM i is Affected by Privilege Escalation [] | |
| First Time appeared |
Ibm
Ibm i |
|
| Weaknesses | CWE-427 | |
| CPEs | cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm i |
|
| References |
| |
| Metrics |
cvssV3_1
|