← CVE Intelligence

CVE-2024-47104

IBM i incorrect privilege assignment PUBLISHED

Description (CNA)

IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file security attributes without having object management rights to the physical file. A malicious actor can use the elevated privileges to perform actions restricted by their view privileges.

Affected (CNA)

Vendor / productVersions
IBM / iaffected 7.4, 7.5

CWE

CWE-732

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.