CVE-2023-45182CWE-922

IBM i Access Client Solutions information disclosure

High · published December 14, 2023

CVSS v3.1
7.4
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 is vulnerable to having its key for an encrypted password decoded. By somehow gaining access to the encrypted password, a local attacker could exploit this vulnerability to obtain the password to other systems. IBM X-Force ID: 268265.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.7th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2023-12-14T14:02Z
EPSS history
Timeline
  • 14 DEC 14:02Z
    IBM i Access Client Solutions information disclosure
    cvelistv5