Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-02483
HistoryDec 23, 2022 - 12:00 a.m.

IBM Navigator for i Unauthorized Access Vulnerability

2022-12-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
25
ibm
navigator for i
unauthorized access
vulnerability
international business machines
ibmi
versions 7.3
7.4
7.5
authenticated users
servlet filters
log files
attacker
exploit
interface checks

EPSS

0.001

Percentile

31.4%

IBM Navigator for i is a console interface from International Business Machines (IBM) used in IBMi to perform and manage critical tasks in IBMi. IBM Navigator for i in versions 7.3, 7.4, and 7.5 is vulnerable to unauthorized access, where authenticated users using this interface access their entitled access to IBM Navigator for i log files that they are entitled to but not authorized to access. An attacker could exploit this vulnerability by modifying servlet filters to bypass interface checks and download log files.

EPSS

0.001

Percentile

31.4%

Related for CNVD-2023-02483