Lucene search

IbmCVELIST:CVE-2023-45184

HistoryDec 14, 2023 - 1:42 a.m.

CVE-2023-45184 IBM i Access Client Solutions

2023-12-1401:42:01

CWE-922

ibm

www.cve.org

ibm i access client solutions

vulnerability

decryption key

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

31.8%

JSON

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryption key due to improper authority checks. IBM X-Force ID: 268270.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "i Access Client Solutions",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "1.1.4",
        "status": "affected",
        "version": "1.1.2",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "1.1.9.3",
        "status": "affected",
        "version": "1.1.4.3",
        "versionType": "semver"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/268270

www.ibm.com/support/pages/node/7091942

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

31.8%

JSON

Related for CVELIST:CVE-2023-45184