CVE-2024-27273CWE-266

IBM AIX privilege escalation

High · published May 7, 2024

CVSS v3.1
8.1
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead to privilege escalation. IBM X-Force ID: 284903.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2024-05-07T20:17Z
EPSS history
Timeline
  • 07 MAY 20:17Z
    IBM AIX privilege escalation
    cvelistv5