Description
CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the cluster-wide password-change list.
References
- http://aix.software.ibm.com/aix/efixes/security/powerha_advisory.asc
- IV76946 vendor-advisory
- 76948 vdb-entry
- IV77007 vendor-advisory
- IV76943 vendor-advisory