CVE-2023-45184

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryption key due to improper authority checks. IBM X-Force ID: 268270...

CVE-2023-45184

CVE-2023-45184 concerns IBM i Access Client Solutions. Affected versions: 1.1.2–1.1.4 and 1.1.4.3–1.1.9.3. Root cause: improper authority checks allow an attacker to obtain a decryption key. Red Hat and other sources confirm the issue and reference IBM X-Force ID 268270. Impact: potential exposur...

Security Bulletin: IBM i Access Client Solutions is vulnerable to remote code execution and failing to secure passwords due to multiple vulnerabilities

Summary IBM i Access Client Solutions is vulnerable to remote code execution due to a flaw which fails to authenticate the origin of a serialized object CVE-2023-45185, and insecurely storing passwords by allowing the password encryption key to be retrieved CVE-2023-45184 or decoded using a brute...