IBM i is affected by a privilege escalation vulnerability in Web Administration GUI []
IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check. A malicious actor could cause user-controlled code to run with administrator privilege.
Problem Types
| Type | CWE ID | Description |
|---|
| CWE | CWE-284 | CWE-284 Improper Access Control |
Type: CWE
Description: CWE-284 Improper Access Control
Metrics
| Version | Base score | Base severity | Vector |
|---|
| 3.1 | 6.4 | MEDIUM | CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H |
Version: 3.1
Base score: 6.4
Base severity: MEDIUM
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H