CVE-2024-22318

🗓️ 09 Feb 2024 00:26:52Reported by ibmType

cve🔗 web.nvd.nist.gov👁 106 Views🌐 WEB

IBM i ACS 1.1.2-1.1.9.4 Vulnerable to NTLM Hash Disclosur

Reporter	Title	Published	Views	Family All 16
0day.today	IBM i Access Client Solutions Remote Credential Theft Vulnerability	12 Feb 202400:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM i Access Client Solutions is vulnerable to remote credential theft when NTLM is enabled on Windows workstations	8 Feb 202417:45	–	ibm
BDU FSTEC	The vulnerability of the cross-platform access control system IBM i Access Client Solutions, related to improper session management, allows a hacker to intercept the user’s session and disclose sensitive information about the NT LAN Manager hash (NTLM).	31 May 202400:00	–	bdu_fstec
Circl	CVE-2024-22318	9 Feb 202402:26	–	circl
CNNVD	IBM i 授权问题漏洞	9 Feb 202400:00	–	cnnvd
CNVD	IBM i Access Client Solutions Authorization Issues Vulnerability	22 Feb 202400:00	–	cnvd
Cvelist	CVE-2024-22318 IBM i Access Client Solutions information disclosure	9 Feb 202400:26	–	cvelist
Exploit DB	IBM i Access Client Solutions v1.1.2 - 1.1.4, v1.1.4.3 - 1.1.9.4 - Remote Credential Theft	26 Feb 202400:00	–	exploitdb
EUVD	EUVD-2024-19879	3 Oct 202520:07	–	euvd
NVD	CVE-2024-22318	9 Feb 202401:15	–	nvd

NVD

Vulners

Node

ibm i_access_client_solutionsRange1.1.2–1.1.4

ibm i_access_client_solutionsRange1.1.4.3–1.1.9.4

[
  {
    "defaultStatus": "unaffected",
    "product": "i Access Client Solutions",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "1.1.4",
        "status": "affected",
        "version": "1.1.2",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "1.1.9.4",
        "status": "affected",
        "version": "1.1.4.3",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/279091
ibm	www.ibm.com/support/pages/node/7116091
packetstormsecurity	www.packetstormsecurity.com/files/177069/IBM-i-Access-Client-Solutions-Remote-Credential-Theft.html
seclists	www.seclists.org/fulldisclosure/2024/Feb/7

Parameter	Position	Path	Description	CWE
screenHistoryArchiveLocation	path	\\ATTACKER-SERVER\RemoteCredTheftP0c	UNC path injection in ACS configuration file to host hostile server for credential theft	CWE-384, CWE-327
Filename	path	\\ATTACKER-SERVER\RemoteCredTheftP0c	UNC path injection in ACS KeyRemapFile parameter to host hostile server for credential theft	CWE-384, CWE-327
DefaultKeyboard	path	\\ATTACKER-SERVER\RemoteCredTheftP0c	UNC path injection in ACS WS profile DefaultKeyboard setting to host hostile server for credential theft	CWE-384, CWE-327

17 Jun 2026 07:11Current

4.9Medium risk

Vulners AI Score4.9

CVSS 3.15.1 - 5.5

EPSS0.00573

SSVC