PT-2024-5315 · Ibm · Ibm I

Published 2024-06-14 · Updated 2024-08-27 · CVE-2024-27275

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM i versions 7.2 through 7.5

Description The issue is related to insufficient authority requirements, allowing a local user without administrator privileges to configure a physical file trigger. This can lead to the execution of the trigger with the privileges of a user who has been socially engineered to access the target file. The problem is caused by a lack of proper access control.

Recommendations For IBM i versions 7.2 through 7.5, the correction is to require administrator privilege to configure trigger support. Additionally, applying the provided fix, which restricts the use of the ADDPFTRG command, can mitigate the issue. This fix is a breaking change and is documented in the Memo to Users.

Fix

Improper Authentication

Incorrect Privilege Assignment

Weakness Enumeration

CWE-287

CWE-264

CWE-266

Related Identifiers

BDU:2024-05943

CVE-2024-27275

Affected Products

Ibm I

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-27275 · Security Note
• https://bdu.fstec.ru/vul/2024-05943 · Security Note
• https://osv.dev/vulnerability/CVE-2024-27275 · Vendor Advisory
• https://vuldb.com/?id.268741 · Note
• https://ibm.com/support/pages/node/7157637 · Patch, Vendor Advisory
• https://twitter.com/SilentSignalHU/status/1828329360824172857 · Twitter Post
• https://t.me/cvenotify/88764 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/285203 · Note
• https://cybersecurity-help.cz/vdb/SB2024072615 · Note
• https://t.me/cvenotify/83398 · Telegram Post