CVE-2024-38330 | THREATINT

Assigner	ibm
Reserved	2024-06-13
Published	2024-07-08
Updated	2024-08-02

Description

IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 295227.

HIGH: 7.0

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-427 Uncontrolled Search Path Element

Product status

Default status

unaffected

7.2, 7.3, 7.4

affected

Credits

Zoltan Panczel 0x4006474260

References

https://www.ibm.com/support/pages/node/7159615 vendor-advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/295227 vdb-entry

cve.org CVE-2024-38330

nvd.nist.gov CVE-2024-38330

Download JSON

https://cve.threatint.com

Subscribe to our newsletter to learn more about our work.