CVE-2023-30989: IBM i privilege escalation
First published: Sun Jul 16 2023(Updated: )
IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system. IBM X-Force ID: 254017.
Credit: psirt@us.ibm.com psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM i | =7.2 | |
| IBM i | =7.3 | |
| IBM i | =7.4 | |
| IBM i | =7.5 | |
| IBM i | <=7.5 | |
| IBM i | <=7.4 | |
| IBM i | <=7.3 | |
| IBM i | <=7.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-30989?
CVE-2023-30989 is a local privilege escalation vulnerability in IBM Performance Tools for i.
How does CVE-2023-30989 impact IBM Performance Tools for i?
CVE-2023-30989 allows a malicious actor with command line access to the host operating system to elevate privileges and gain all object access to the host operating system.
Which versions of IBM Performance Tools for i are affected by CVE-2023-30989?
IBM Performance Tools for i versions 7.2, 7.3, 7.4, and 7.5 are affected by CVE-2023-30989.
What is the severity of CVE-2023-30989?
CVE-2023-30989 has a severity rating of 8.4 (High).
How can I fix CVE-2023-30989 in IBM Performance Tools for i?
To fix CVE-2023-30989, it is recommended to apply the necessary updates or patches provided by IBM.
- collector/nvd-latest
- collector/nvd-index
- agent/references
- agent/author
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-api
- agent/software-canonical-lookup-request
- agent/remedy
- agent/weakness
- agent/description
- agent/severity
- agent/title
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- vendor/ibm
- canonical/ibm i
- version/ibm i/7.2
- version/ibm i/7.3
- version/ibm i/7.4
- version/ibm i/7.5