PT-2023-8435

CVE-2023-45185

·

Publicado

2023-12-14

·

Atualizado

2024-04-30

Descrição por

CVSS 2.0
9.0
Alta
MétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions IBM i Access Client Solutions versions 1.1.2 through 1.1.4 IBM i Access Client Solutions versions 1.1.4.3 through 1.1.9.3
Description The issue is related to insufficient authorization procedure in the IBM i Access Client Solutions, allowing a remote attacker to execute arbitrary code due to improper authority checks. This could enable the attacker to perform operations on the PC under the user's authority.
Recommendations For versions 1.1.2 through 1.1.4, update to a version outside of this range to mitigate the risk. For versions 1.1.4.3 through 1.1.9.3, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to sensitive operations on the PC to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾