Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pppq-x5vp-whw6

Опубликовано: 24 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.5

Описание

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.

EPSS

Процентиль: 17%
0.00053
Низкий

8.5 High

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 8.5
nvd
12 месяцев назад

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.

CVSS3: 8.5
fstec
12 месяцев назад

Уязвимость операционной системы IBM i, связанная с неконтролируемым элементом пути поиска, позволяющая нарушителю выполнить произвольный код с правами администратора

EPSS

Процентиль: 17%
0.00053
Низкий

8.5 High

CVSS3

Дефекты

CWE-427