Beveiligingsadvies

CVE-2022-40746

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-21 17:53:45
Laatst bijgewerkt 2025-04-24 19:08:58
Toegewezen door ibm
CVSS-score 7.2
Status PUBLISHED

Beschrijving

IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236581.