CVE-2023-38721: IBM i privilege escalation
The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor could gain access to a command line with elevated privileges allowing root access to the host operating system. IBM X-Force ID: 262173.
Other sources
The IBM i product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor could gain access to a command line with elevated privileges allowing root access to the host operating system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-38721?
CVE-2023-38721 is a local privilege escalation vulnerability in the IBM i product Facsimile Support for i.
What products are affected by CVE-2023-38721?
IBM i versions 7.2, 7.3, 7.4, and 7.5 are affected by CVE-2023-38721.
What is the severity of CVE-2023-38721?
The severity of CVE-2023-38721 is high with a CVSS score of 8.4.
How can a malicious actor exploit CVE-2023-38721?
A malicious actor can exploit CVE-2023-38721 to gain access to a command line with elevated privileges, allowing root access to the host operating system.
How can I fix CVE-2023-38721?
To fix CVE-2023-38721, it is recommended to apply the necessary security patches or updates provided by IBM.