Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580.
References
Link | Resource |
---|---|
https://https://exchange.xforce.ibmcloud.com/vulnerabilities/263580 | Broken Link VDB Entry Vendor Advisory |
https://www.ibm.com/support/pages/node/7038748 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Sep 2023, 18:47
Type | Values Removed | Values Added |
---|---|---|
First Time |
Ibm
Ibm i |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
CPE | cpe:2.3:o:ibm:i:7.5:*:*:*:*:*:*:* cpe:2.3:o:ibm:i:7.4:*:*:*:*:*:*:* cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:* cpe:2.3:o:ibm:i:7.2:*:*:*:*:*:*:* |
|
References | (MISC) https://www.ibm.com/support/pages/node/7038748 - Patch, Vendor Advisory | |
References | (MISC) https://https://exchange.xforce.ibmcloud.com/vulnerabilities/263580 - Broken Link, VDB Entry, Vendor Advisory | |
CWE | CWE-269 |
28 Sep 2023, 18:19
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-09-28 18:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-40375
Mitre link : CVE-2023-40375
CVE.ORG link : CVE-2023-40375
JSON object : View
Products Affected
ibm
- i
CWE
CWE-269
Improper Privilege Management