Spoofing

2022-11-2118:15:00

PRIOn knowledge base

www.prio-n.com

ibm i access family

local attacker

code execution

dll search order

vulnerability

ibm x-force id

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236581.

CPENameOperatorVersion
i_access_client_solutionsge1.1.2
i_access_client_solutionsle1.1.4
i_access_client_solutionsge1.1.4.3
i_access_client_solutionsle1.1.9.0