Lucene search
HistorySep 20, 2023 - 8:15 p.m.
CVE-2023-37410
ibm
personal communications
privilege escalation
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0
Percentile
5.1%
IBM Personal Communications 14.05, 14.06, and 15.0.0 could allow a local user to escalate their privileges to the SYSTEM user due to overly permissive access controls. IBM X-Force ID: 260138.
Affected configurations
Node
ibmperson_communicationsMatch14.0.5
ORibmperson_communicationsMatch14.0.6
ORibmperson_communicationsMatch15.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | person_communications | 14.0.5 | cpe:2.3:a:ibm:person_communications:14.0.5:*:*:*:*:*:*:* |
| ibm | person_communications | 14.0.6 | cpe:2.3:a:ibm:person_communications:14.0.6:*:*:*:*:*:*:* |
| ibm | person_communications | 15.0.0 | cpe:2.3:a:ibm:person_communications:15.0.0:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2023-09-20 20:15:00
cvelist
cvelist
CVE-2023-37410 IBM Personal Communications privilege escalation
2023-09-20 19:06:55
ibm
ibm
Security Bulletin: Control Access issues in PCOMM
2024-03-01 10:33:09
cve
cve
CVE-2023-37410
2023-09-20 20:15:11
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-37410