Lucene search
IbmCVELIST:CVE-2024-38330HistoryJul 08, 2024 - 1:12 a.m.
CVE-2024-38330 IBM i privilege escalation
2024-07-0801:12:50
CWE-427
ibm
www.cve.org
9
ibm
privilege escalation
local user
elevated privileges
unqualified library program call
malicious actor
administrator privilege
ibm x-force id
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
14.5%
IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 295227.
CNA Affected
[
{
"cpes": [
"cpe:2.3:a:ibm:i:7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "i",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "7.2, 7.3, 7.4"
}
]
}
]Related
nvd
nvd
CVE-2024-38330
2024-07-08 02:15:01
ibm
ibm
vulnrichment
vulnrichment
CVE-2024-38330 IBM i privilege escalation
2024-07-08 01:12:50
cve
cve
CVE-2024-38330
2024-07-08 02:15:01
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
14.5%
Related for CVELIST:CVE-2024-38330