The vulnerability allows an authenticated user to indirectly disable system auditing, a function that the user is not authorized to control. This occurs due to a protection mechanism failure (CWE‑693). By disabling audit logging the attacker can conceal malicious activity and evade detection. The flaw therefore represents a privilege escalation that compromises integrity and accountability of the system.

Affected products are IBM i versions 7.3, 7.4, 7.5, and 7.6. Users on any of these releases are potentially impacted and should verify whether a fix is already in place or upgrade to a supported release.

The CVSS score of 3.6 indicates moderate severity, and the EPSS score is currently not available. The vulnerability is not listed in CISA’s KEV catalog. Because the flaw requires authentication and the user must possess a user profile that otherwise lacks the authority to modify audit settings, the risk is primarily to internal adversaries with legitimate credentials. No public exploit is known, but the impact of disabling audit logs can be substantial by allowing covert activity to go undetected.