CVE-2023-42006: IBM i information disclosure
First published: Wed Nov 29 2023(Updated: )
IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information caused by improper authority checks. IBM X-Force ID: 265266.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Administration Runtime Expert for i | <=7.5 | |
| IBM Administration Runtime Expert for i | <=7.4 | |
| IBM Administration Runtime Expert for i | <=7.3 | |
| IBM Administration Runtime Expert for i | <=7.2 | |
| IBM i | =7.2 | |
| IBM i | =7.3 | |
| IBM i | =7.4 | |
| IBM i | =7.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for IBM i information disclosure?
The vulnerability ID for IBM i information disclosure is CVE-2023-42006.
What is the severity rating for CVE-2023-42006?
The severity rating for CVE-2023-42006 is 8.4 (high severity).
What is the affected software for CVE-2023-42006?
The affected software for CVE-2023-42006 is IBM Administration Runtime Expert for i versions 7.2, 7.3, 7.4, and 7.5.
How can a local user exploit this vulnerability?
A local user can exploit this vulnerability by obtaining sensitive information through improper authority checks.
Are there any references available for CVE-2023-42006?
Yes, you can find references for CVE-2023-42006 at the following links: [Reference 1](https://www.ibm.com/support/pages/node/7085891) and [Reference 2](https://exchange.xforce.ibmcloud.com/vulnerabilities/265266).
- collector/mitre-cve
- collector/ibm-support
- collector/nvd-api
- vendor/ibm
- canonical/ibm administration runtime expert for i
- version/ibm administration runtime expert for i/7.5
- version/ibm administration runtime expert for i/7.4
- version/ibm administration runtime expert for i/7.3
- version/ibm administration runtime expert for i/7.2
- canonical/ibm i
- version/ibm i/7.2
- version/ibm i/7.3
- version/ibm i/7.4
- version/ibm i/7.5