Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-47104 EUVD-2024-42861GHSA-5wg4-55wc-w7g6

IBM i incorrect privilege assignment

Published Dec 18, 2024 · Updated Dec 18, 2024 · Assigned by ibm

Description

IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file security attributes without having object management rights to the physical file. A malicious actor can use the elevated privileges to perform actions restricted by their view privileges.

Affected products

VendorProductAffectedFixed
IBM i 7.4, 7.5 —

References