Vulnerability · Published Aug 2, 2021 · Assigned by ibm

CVE-2021-29741

High 8.4

In plain English

A high-severity security flaw in AIX from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.0)8.4High

Exploit odds (30 days)0.3%top 81.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root privileges. IBM X-Force ID: 201478.

Affected products (as reported)

Vendor	Product	Versions
IBM	VIOS	3.1
IBM	AIX	7.17.2

References

https://www.ibm.com/support/pages/node/6477018 x_refsource_CONFIRM
ibm-aix-cve202129741-priv-escalation (201478) vdb-entry, x_refsource_XF