CVE-2023-37410: IBM Personal Communications privilege escalation
IBM Personal Communications 14.05, 14.06, and 15.0.0 could allow a local user to escalate their privileges to the SYSTEM user due to overly permissive access controls. IBM X-Force ID: 260138.
Other sources
IBM Personal Communications could allow a local user to escalate their privileges to the SYSTEM user due to overly permissive access controls.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-37410?
CVE-2023-37410 is a vulnerability in IBM Personal Communications 14.05, 14.06, and 15.0.0 that could allow a local user to escalate their privileges to the SYSTEM user due to overly permissive access controls.
Who is affected by CVE-2023-37410?
IBM Personal Communications versions 14.05, 14.06, and 15.0.0 are affected by CVE-2023-37410.
What is the severity of CVE-2023-37410?
CVE-2023-37410 has a severity of 8.4, which is considered high.
How can a local user exploit CVE-2023-37410?
A local user can exploit CVE-2023-37410 by taking advantage of the overly permissive access controls to escalate their privileges to the SYSTEM user.
Is there a fix available for CVE-2023-37410?
Yes, a fix is available for CVE-2023-37410. Please refer to the IBM support page for more information.