CVE-2024-47104 — IBM i incorrect privilege assignment
IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file secu…
Published: 2024-12-18 · CVSS: 6.8 · CVSS 3.1
IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file security attributes without having object management rights to the physical file. A malicious actor can use the elevated privileges to perform actions restricted by their view privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7