Lucene search

K
cve[email protected]CVE-2024-27264
HistoryMay 22, 2024 - 8:15 p.m.

CVE-2024-27264

2024-05-2220:15:09
web.nvd.nist.gov
27
ibm
performance tools
local user
privilege escalation
administrator privilege
unqualified library call

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 284563.

Affected configurations

Vulners
Node
ibmiMatch7.2
OR
ibmiMatch7.3
OR
ibmiMatch7.4
OR
ibmiMatch7.5

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:i:7.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "i",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.2, 7.3, 7.4, 7.5"
      }
    ]
  }
]

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

Related for CVE-2024-27264