CVE-2024-52895

Medium

Description

IBM i 7.4 and 7.5 is vulnerable to a database access denial of service caused by a bypass of a database capabilities restriction check. A privileged bad actor can remove or otherwise impact database infrastructure files resulting in incorrect behavior of software products that rely upon the database.

SeverityMedium

CVSS6.5

Exploit probability35. percentile0.4%

Product

PublishedFeb 14, 2025

First seenFeb 14, 2025

Weakness typeCWE-754CWE-754

How to fix

Vendor advisories

ibm.com/support/pages/node/7183052

Affected products

Product	Affected versions	Fixed in
ibm i	7.4, 7.5, 7.6	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.