CVE-2024-51464 — IBM i authentication bypass

CVE-2024-51464

IBM i authentication bypass PUBLISHED

Description (CNA)

IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to remotely perform operations that the user is not allowed to perform when using Navigator for i.

Affected (CNA)

Vendor / product	Versions
IBM / i	affected 7.3, 7.4, 7.5

CWE

CWE-288

References

https://www.ibm.com/support/pages/node/7179509

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2024/Dec/20
http://seclists.org/fulldisclosure/2024/Dec/19