Elevated Privilege Vulnerability in IBM i 7.4 and 7.5

CVE-2024-47104

What is CVE-2024-47104?

CVE-2024-47104 affects IBM i versions 7.4 and 7.5, where authenticated users can exploit a vulnerability to gain elevated privileges over physical file security attributes. Despite lacking object management rights, users with viewing permissions can alter the security configurations of physical files. This allows potentially malicious actions that bypass intended restrictions, posing severe security risks to affected systems. Organizations using IBM i must address this vulnerability to maintain the integrity and security of their file management systems.

References