CVE-2023-43064CWE-427

IBM i code execution

High · published December 25, 2023

CVSS v3.1
7.0
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

Facsimile Support for IBM i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause arbitrary code to run with the privilege of the user invoking the facsimile support. IBM X-Force ID: 267689.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-12-25T02:02Z
EPSS history
Timeline
  • 25 DEC 02:02Z
    IBM i code execution
    cvelistv5