Vulnerability · Published Dec 14, 2023 · Assigned by ibm
CVE-2023-45185IBM i Access Client Solutions code execution
High 7.4
In plain English
A high-severity incorrect authorization in i Access Client Solutions from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)7.4High
Exploit odds (30 days)1.0%top 37.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IBM X-Force ID: 268273.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | i Access Client Solutions | 1.1.2 – through 1.1.41.1.4.3 – through 1.1.9.3 |
Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L