CVE-2024-27275
High
Description
IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority requirement. A local user without administrator privilege can configure a physical file trigger to execute with the privileges of a user socially engineered to access the target file. The correction is to require administrator privilege to configure trigger support.
SeverityHigh
CVSS7.4
Exploit probability—
Product
I
PublishedJun 15, 2024
First seenJun 15, 2024
Weakness typeCWE-266CWE-266
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm i | 7.2, 7.3, 7.4, 7.5 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.