Lucene search
HistoryJul 08, 2024 - 2:15 a.m.
CVE-2024-38330
ibm
system management
vulnerability
elevated privileges
administrator privilege
x-force id
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
14.5%
IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 295227.
Affected configurations
Node
ibmiMatch7.2
ORibmiMatch7.3
ORibmiMatch7.4
Related
ibm
ibm
cvelist
cvelist
CVE-2024-38330 IBM i privilege escalation
2024-07-08 01:12:50
vulnrichment
vulnrichment
CVE-2024-38330 IBM i privilege escalation
2024-07-08 01:12:50
cve
cve
CVE-2024-38330
2024-07-08 02:15:01
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
14.5%
Related for NVD:CVE-2024-38330