CVE-2023-30990

Опубликовано: 04 июл. 2023

Источник: nvd

CVSS3: 8.6

CVSS3: 9.8

EPSS Низкий

Описание

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/254036
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/7008573
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/254036
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/7008573
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:i:7.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.00072

Низкий

8.6 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

GHSA-7px4-mg4j-f38g

CVSS3: 5.6

github

больше 2 лет назад

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036.

EPSS

Процентиль: 22%

0.00072

Низкий

8.6 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-94