Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5wg4-55wc-w7g6

Опубликовано: 18 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file security attributes without having object management rights to the physical file. A malicious actor can use the elevated privileges to perform actions restricted by their view privileges.

IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file security attributes without having object management rights to the physical file. A malicious actor can use the elevated privileges to perform actions restricted by their view privileges.

EPSS

Процентиль: 26%
0.0009
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 6.8
nvd
около 1 года назад

IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file security attributes without having object management rights to the physical file. A malicious actor can use the elevated privileges to perform actions restricted by their view privileges.

EPSS

Процентиль: 26%
0.0009
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-732