CVE-2023-45166: IBM AIX privilege escalation

Q: What is the severity of CVE-2023-45166?

CVE-2023-45166 has a critical severity rating as it allows non-privileged local users to gain elevated privileges.

Q: Who is affected by CVE-2023-45166?

CVE-2023-45166 affects IBM AIX versions 7.2 and 7.3, as well as IBM VIOS version 3.1.

Q: How do I fix CVE-2023-45166?

To fix CVE-2023-45166, apply the latest security patches provided by IBM for affected AIX and VIOS versions.

Q: What type of vulnerability is CVE-2023-45166?

CVE-2023-45166 is a local privilege escalation vulnerability associated with the piodmgrsu command.

Q: Can I exploit CVE-2023-45166 remotely?

No, CVE-2023-45166 requires local access to the system to exploit the vulnerability.

Published Dec 13, 2023

Updated

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu command to obtain elevated privileges. IBM X-Force ID: 267964.

Other sources

IBM AIX could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu command to obtain elevated privileges.

Affected Software

6 affected components

IBM AIX<=7.2

IBM AIX<=7.3

IBM VIOS<=3.1

IBM VIOS=3.1

IBM AIX=7.2

IBM AIX=7.3

Event History

Dec 13, 2023

CVE Published

via MITRE·11:01 PM

Data Sourced

via MITRE·11:01 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7095022

Frequently Asked Questions

What is the severity of CVE-2023-45166?

CVE-2023-45166 has a critical severity rating as it allows non-privileged local users to gain elevated privileges.

Who is affected by CVE-2023-45166?

CVE-2023-45166 affects IBM AIX versions 7.2 and 7.3, as well as IBM VIOS version 3.1.

How do I fix CVE-2023-45166?