CVE-2023-30989: IBM i privilege escalation
IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system. IBM X-Force ID: 254017.
Other sources
IBM Performance Tools for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-30989?
CVE-2023-30989 is a local privilege escalation vulnerability in IBM Performance Tools for i.
How does CVE-2023-30989 impact IBM Performance Tools for i?
CVE-2023-30989 allows a malicious actor with command line access to the host operating system to elevate privileges and gain all object access to the host operating system.
Which versions of IBM Performance Tools for i are affected by CVE-2023-30989?
IBM Performance Tools for i versions 7.2, 7.3, 7.4, and 7.5 are affected by CVE-2023-30989.
What is the severity of CVE-2023-30989?
CVE-2023-30989 has a severity rating of 8.4 (High).
How can I fix CVE-2023-30989 in IBM Performance Tools for i?
To fix CVE-2023-30989, it is recommended to apply the necessary updates or patches provided by IBM.