CVE-2023-45185

IBM i Access Client Solutions code execution

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IBM X-Force ID: 268273.

Affected

IBM · i Access Client Solutions

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 IBM

7.4 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

EPSS

0.99% chance of exploitation in the next 30 days, 62nd percentile

Published

2023-12-14

Updated

2024-08-02

Proof-of-concept exploits (1)

• afine-com/CVE-2023-451850★ · 2024-01-24

Security advisories

• https://www.ibm.com/support/pages/node/7091942

References

• CVE Record
• NVD entry

Related

• CVE-2018-25031
• CVE-2022-35501
• CVE-2022-36433
• CVE-2023-35840
• CVE-2023-39062
• CVE-2023-45182