Privilege Escalation Vulnerability in IBM AIX and VIOS Software

CVE-2022-36768

What is CVE-2022-36768?

A vulnerability exists in IBM AIX versions 7.1, 7.2, 7.3, and VIOS 3.1 that allows a non-privileged local user to exploit the invscout command. By manipulating this command, an attacker could gain unauthorized access to root privileges, potentially leading to further system compromises. Administrators should assess their systems urgently to implement necessary patches. For additional information, visit IBM's support page and X-Force Exchange.

References