Impact
The vulnerability allows an authenticated attacker to elevate their privilege to QSECOFR or Root authority, effectively granting full control over the IBM i system. This elevation can be used to modify system configurations, access sensitive data, or execute arbitrary code with unrestricted permissions. The weakness is a classic privilege management flaw (CWE‑269).
Affected Systems
IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected. Users running these operating system releases are at risk if they possess valid user credentials.
Risk and Exploitability
The CVSS score of 7.8 indicates a high severity level. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The vulnerability requires authentication, so a local or remote user with valid credentials can exploit it. The attack vector is inferred to be from an authenticated user, and the attacker can naturally take advantage of the privilege escalation to perform privileged operations.
OpenCVE Enrichment