CVE-2024-25050

High

Description

IBM i 7.2, 7.3, 7.4, 7.5 and IBM Rational Development Studio for i 7.2, 7.3, 7.4, 7.5 networking and compiler infrastructure could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privileges. IBM X-Force ID: 283242.

SeverityHigh
CVSS8.4
Exploit probability—
ProductIbm Rational Developer For I
PublishedApr 28, 2024
First seenApr 28, 2024
Weakness typeCWE-427CWE-427

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
ibm rational_developer_for_i7.2, 7.3, 7.4, 7.5—
ibm i7.2, 7.3, 7.4, 7.5—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2024-25050 · Ibm Rational Developer For I · Dark Radar