Code injection

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM X-Force ID: 230502...

CVE-2022-36768

CVE-2022-36768 affects IBM AIX 7.1, 7.2, 7.3 and VIOS 3.1, where a vulnerability in the invscout command could allow a non-privileged local user to obtain root privileges. Affected fileset: invscout.rte (lower 2.2.0.0 – upper 2.2.0.22). Remediation: IBM provides fixes for AIX/VIOS; install the in...

CVE-2022-36768

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014...

CVE-2022-34356

CVE-2022-34356 affects IBM AIX 7.1, 7.2, 7.3 and VIOS 3.1. A local, non-privileged user could exploit a vulnerability in the AIX kernel to obtain root privileges. The IBM Security Bulletin (kernel_advisory4) confirms the affected products/versions and lists the vulnerable filesets (e.g., bos.mp64...

CVE-2022-34356

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM X-Force ID: 230502...

IBM AIX 命令注入漏洞

IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. IBM AIX versions 7.1, 7.2, 7.3, and VIOS version 3.1 contain a security vulnerability. Attackers exploit the vulnerability to gain root privileges...

IBM AIX 安全漏洞

IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. an elevation of privilege vulnerability exists in IBM AIX versions 7.1, 7.2, 7.3 and VIOS version 3.1. A local attacker could exploit the vulnerability to gain...

AIX is vulnerable to a denial of service due to libxml2 (CVE-2022-29824)

IBM SECURITY ADVISORY First Issued: Mon Sep 12 15:07:01 CDT 2022 |Updated: Mon Dec 12 12:49:47 CST 2022 |Update: Added iFixes for AIX 7.2 TL5 SP5 and VIOS 3.1.4.10. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/libxml2advisory3.asc...

AIX is vulnerable to a privilege escalation vulnerability due to invscout

IBM SECURITY ADVISORY First Issued: Mon Sep 12 14:58:31 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/invscoutadvisory3.asc https://aix.software.ibm.com/aix/efixes/security/invscoutadvisory3.asc...

AIX is vulnerable to a privilege escalation vulnerability,AIX kernel is vulnerable to a privilege escalation vulnerability

IBM SECURITY ADVISORY First Issued: Mon Sep 12 13:12:47 CDT 2022 |Updated: Mon Oct 10 14:29:18 CDT 2022 |Update: Corrected the affected upper fileset levels for VIOS 3.1.2.30 and | 3.1.2.40. Added iFixes with the correct prereqs for VIOS 3.1.2.30 and | 3.1.2.40. The most recent version of this...

CVE-2022-36768

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014...

CVE-2022-34356

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM X-Force ID: 230502...

PT-2022-23612 · Ibm · Ibm Aix +1

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: A vulnerability exists in the invscout command that could allow a non-privileged local user to obtain root privileges. Recommendations: For IBM AIX versions 7.1 through 7.3,...

Security Bulletin: Information Disclosure and Denial of Service Vulnerabilities in the IBM Spectrum Protect Backup-Archive Client may affect IBM Spectrum Protect for Space Management (CVE-2022-22478, CVE-2022-22474)

Summary The IBM Spectrum Protect back-up archive client is vulnerable to information disclosure and denial of service vulnerabilities which may affect IBM Spectrum Protect for Space Management. Vulnerability Details CVEID:CVE-2022-22478 DESCRIPTION: IBM Spectrum Protect Client 8.1.0.0 through...

Security Bulletin: Apache Log4j Vulnerability Affects IBM Sterling Transformation Extender (CVE-2021-44228)

Summary IBM Sterling Transformation Extender is impacted by Log4j2 security vulnerability, CVE-2021-44228, where an attacker can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. Vulnerability Details...

Security Bulletin: AIX is vulnerable to arbitrary command execution (CVE-2022-1292 and CVE-2022-2068) or an attacker may obtain sensitive information (CVE-2022-2097) due to OpenSSL

Summary A vulnerability in OpenSSL could allow a remote attacker to execute arbitrary commands CVE-2022-1292 and CVE-2022-2068 or obtain sensitive information CVE-2022-2097. OpenSSL is used by AIX as part of AIX's secure network communications. Vulnerability Details CVEID:CVE-2022-2097 DESCRIPTIO...

AIX is vulnerable to arbitrary command execution due to OpenSSL

IBM SECURITY ADVISORY First Issued: Wed Aug 17 16:39:03 CDT 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory36.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory36.asc...

dermatologie-esthetique-aix.fr Cross Site Scripting vulnerability OBB-2850543

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: Updating OpenJDK in Identity Insight 10.0 to 17.0.3

Summary This document provides instructions on how to upgrade OpenJDK used in IBM InfoSphere Identity Insight II 10.0 to 17.0.3. Vulnerability Details This document provides instructions on how to upgrade OpenJDK used in IBM InfoSphere Identity Insight II 10.0 to 17.0.0.3. NOTE: Please substitute...

Security Bulletin: AIX is affected by multiple vulnerabilities in Python

Summary AIX is affected by multiple vulnerabilities due to Python. Python is used by AIX as part of Ansible node management automation. Vulnerability Details CVEID:CVE-2022-22827 DESCRIPTION: Expat could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflo...