IBM i 7.6 contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command. A malicious actor can use the command to elevate privileges to gain root access to the host operating system.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HIBM I
APPIbm7.6
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
LPE
CWE
Referencje
Powiązane podatności
CVE-2025-36038CRITICAL9.0PL ✓ten sam produkt
RCE w IBM WebSphere Application Server przez niebezpieczną deserializację
CVE-2020-9412CRITICAL10.0ten sam produkt
The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i con...
CVE-2020-9411CRITICAL10.0ten sam produkt
The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i con...
CVE-2026-10845HIGH7.3ten sam produkt
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain u...
CVE-2026-8646HIGH7.4ten sam produkt
IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 2...