I Security Vulnerabilities and Issues — I CVE List

Lucene search

IbmI

3 matches found

CVE•added 2025/01/24 6:15 p.m.•72 views

CVE-2024-35122

IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to a file level local denial of service caused by an insufficient authority requirement. A local non-privileged user can configure a referential constraint with the privileges of a user socially engineered to access the target file.

2.8CVSS3.8AI score0.00021EPSS

CVE•added 2025/01/03 11:15 p.m.•59 views

CVE-2024-55897

IBM PowerHA SystemMirror for i 7.4 and 7.5 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure li...

4.3CVSS4.5AI score0.00023EPSS

CVE•added 2025/01/03 11:15 p.m.•55 views

CVE-2024-55896

IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames. This vulnerability could allow an attacker to gain improper access and perform unauthorized actions on the system.

5.4CVSS5.7AI score0.00044EPSS