8.4
CVE-2024-25050
- EPSS 0.07%
- Veröffentlicht 28.04.2024 13:15:08
- Zuletzt bearbeitet 13.08.2025 13:12:21
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
IBM i privilege escalation
IBM i 7.2, 7.3, 7.4, 7.5 and IBM Rational Development Studio for i 7.2, 7.3, 7.4, 7.5 networking and compiler infrastructure could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privileges. IBM X-Force ID: 283242.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Rational Developer For I Version7.2
Ibm ≫ Rational Developer For I Version7.3
Ibm ≫ Rational Developer For I Version7.4
Ibm ≫ Rational Developer For I Version7.5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.218 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| psirt@us.ibm.com | 8.4 | 2.5 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-427 Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.