Skip to content
OpenAdvisories
Medium · 6.7 CVE-2019-4536 EUVD-2019-14143GHSA-rg5x-cqqj-3xmv

IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have use…

Published Aug 29, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this vulnerability to obtain elevated privileges on the restored system. IBM X-Force ID: 165592.

Affected products

VendorProductAffectedFixed
IBM i 7.4 —

References