Description
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fujitsu | Linux openFT | ≤ 12.1C96 | 12.1D00 |
| Fujitsu | Oracle Solaris openFT | ≤ 12.1C95 | 12.1D00 |
References
- https://security.eu.fsastech.com/IndexDownload.asp?SoftwareGuid=20873292-0006-4a1c-a188-3940762a0075 vendor-advisory
- https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-FG-2026-042411-Security-Notice.pdf vendor-advisory
- https://global.fujitsu/de-de/capabilities/mainframe-solutions/bs2000-integration mitigation