Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5q43-fxm7-9fhw

Опубликовано: 04 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.4

Описание

IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in non-default configurations, as a result of improper SQL processing. By using a specially crafted SQL operation, the administrator could exploit the vulnerability to perform additional administrator operations. IBM X-Force ID: 244510.

IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in non-default configurations, as a result of improper SQL processing. By using a specially crafted SQL operation, the administrator could exploit the vulnerability to perform additional administrator operations. IBM X-Force ID: 244510.

EPSS

Процентиль: 24%
0.00083
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-79
CWE-89

Связанные уязвимости

CVSS3: 6.4
nvd
почти 3 года назад

IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in non-default configurations, as a result of improper SQL processing. By using a specially crafted SQL operation, the administrator could exploit the vulnerability to perform additional administrator operations. IBM X-Force ID: 244510.

CVSS3: 7.2
fstec
почти 3 года назад

Уязвимость операционной системы IBM i, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 24%
0.00083
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-79
CWE-89