IBM Personal Communications privilege escalation

CVE-2023-37410

Summary

IBM Personal Communications versions 14.05, 14.06, and 15.0.0 are susceptible to a vulnerability that enables local users to escalate their privileges to the SYSTEM user. This issue arises from overly permissive access controls, potentially allowing unauthorized modifications to sensitive configurations or access to critical resources. Organizations leveraging these versions of IBM Personal Communications are advised to implement available security updates and review access control settings to mitigate risks associated with this vulnerability.

References