CVE-2024-55898

HIGH Year: 2024
CVSS v3 Score
8.5
High
Weakness Type
CWE-427
View all →

Vulnerability Description

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.

Related Vulnerabilities

CVE-2017-7884

HIGH
CVSS:8.4(High)

In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by repl...

CWE-4272017

CVE-2019-4094

HIGH
CVSS:8.4(High)

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to r...

CWE-4272019

CVE-2019-4447

HIGH
CVSS:8.4(High)

IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum_debug is a setuid root binary which trusts the PATH environment variable. A low pr...

CWE-4272019

CVE-2019-4473

HIGH
CVSS:8.4(High)

Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-F...

CWE-4272019

CVE-2020-13279

HIGH
CVSS:8.6(High)

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system

CWE-4272020

CVE-2020-3535

HIGH
CVSS:8.4(High)

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerab...

CWE-4272020