Privilege Escalation Vulnerability in IBM AIX and VIOS Software
CVE-2022-36768

8.4HIGH

Key Information:

Vendor

IBM
Status
Aix
ViOS
Vendor
CVE Published:
13 September 2022

What is CVE-2022-36768?

A vulnerability exists in IBM AIX versions 7.1, 7.2, 7.3, and VIOS 3.1 that allows a non-privileged local user to exploit the invscout command. By manipulating this command, an attacker could gain unauthorized access to root privileges, potentially leading to further system compromises. Administrators should assess their systems urgently to implement necessary patches. For additional information, visit IBM's support page and X-Force Exchange.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

AIX 7.1

AIX 7.2

AIX 7.3

References

https://www.ibm.com/support/pages/node/6619725
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/232014
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.