CVE-2024-22318

IBM i Access Client Solutions (ACS) versions 1.1.2–1.1.4 and 1.1.4.3–1.1.9.4 are vulnerable to NTLM hash disclosure. An attacker can modify UNC-capable paths in ACS configuration files to point to a hostile server; if NTLM is enabled on the Windows workstation, the OS will attempt to authenticate...

CVE-2022-40746

CVE-2022-40746 affects IBM i Access Client Solutions (IBM i Access Family) versions 1.1.2–1.1.4 and 1.1.4.3–1.1.9.0. The root cause is a DLL search order hijacking vulnerability that could allow a local authenticated attacker to execute arbitrary code by placing a specially crafted file in a comp...

CVE-2023-45185

CVE-2023-45185 concerns IBM i Access Client Solutions. Affected versions are 1.1.2–1.1.4 and 1.1.4.3–1.1.9.3. The issue arises from improper authority checks and insecure deserialization of network packets or user data, enabling a remote attacker to execute code under the user’s PC context. Red H...

CVE-2023-45182

The CVE-2023-45182 entry affects IBM i Access Client Solutions versions 1.1.2–1.1.4 and 1.1.4.3–1.1.9.3. The root issue is that the key used to encrypt passwords can be decoded if an attacker gains access to the encrypted password, enabling a local attacker to obtain passwords for other systems. ...

CVE-2023-45184

CVE-2023-45184 concerns IBM i Access Client Solutions. Affected versions: 1.1.2–1.1.4 and 1.1.4.3–1.1.9.3. Root cause: improper authority checks allow an attacker to obtain a decryption key. Red Hat and other sources confirm the issue and reference IBM X-Force ID 268270. Impact: potential exposur...