CVE-2023-40378: IBM i privilege escalation

Q: What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2023-40378.

Q: What is the severity rating of CVE-2023-40378?

The severity rating of CVE-2023-40378 is 4.9 (medium).

Q: What is the affected software for CVE-2023-40378?

The affected software for CVE-2023-40378 is IBM Directory Server for IBM i versions up to 7.5.

Q: What is the description of CVE-2023-40378?

CVE-2023-40378 is a local privilege escalation vulnerability in IBM Directory Server for IBM i, which allows a malicious actor with command line access to the host operating system to gain elevated privileges.

Q: How can I fix CVE-2023-40378?

To fix CVE-2023-40378, it is recommended to apply the latest security updates and patches provided by IBM.

Published Oct 5, 2023

Updated

IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host operating system.

Affected Software

8 affected components

IBM i=7.2

IBM i=7.3

IBM i=7.4

IBM i=7.5

IBM i<=7.5

IBM i<=7.4

IBM i<=7.3

IBM i<=7.2

Remediation

Patch Available

https://www.ibm.com/support/pages/node/7047240

Event History

Oct 5, 2023

CVE Published

12:00 AM

Oct 15, 2023

CVE Published

via MITRE·01:36 AM

Data Sourced

via MITRE·01:36 AM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7047240

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?