CVE-2023-45184: IBM i Access Client Solutions

Q: What is the severity of CVE-2023-45184?

CVE-2023-45184 has a critical severity rating due to the potential for unauthorized access to decryption keys.

Q: How do I fix CVE-2023-45184?

To fix CVE-2023-45184, upgrade the IBM i Access Client Solutions to versions beyond 1.1.9.3.

Q: Who is affected by CVE-2023-45184?

CVE-2023-45184 affects IBM i Access Client Solutions versions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3.

Q: What causes CVE-2023-45184?

CVE-2023-45184 is caused by improper authority checks that allow attackers to obtain a decryption key.

Q: Is there a workaround for CVE-2023-45184?

Currently, there are no recommended workarounds for CVE-2023-45184; the only solution is to apply the necessary updates.

Published Dec 8, 2023

Updated

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryption key due to improper authority checks. IBM X-Force ID: 268270.

Other sources

IBM i Access Client Solutions could allow an attacker to obtain a decryption key due to improper authority checks.

— IBM

Affected Software

3 affected components

IBM i Access Client Solutions>=1.1.2<=1.1.4

IBM i Access Client Solutions>=1.1.4.3<1.1.9.4

IBM i Access Family<=1.1.2 - 1.1.4,1.1.4.3 - 1.1.9.3

Event History

Dec 8, 2023

CVE Published

via IBM·12:00 AM

Dec 14, 2023

CVE Published

via MITRE·01:42 AM

Data Sourced

via MITRE·01:42 AM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7091942

Frequently Asked Questions

What is the severity of CVE-2023-45184?

CVE-2023-45184 has a critical severity rating due to the potential for unauthorized access to decryption keys.

How do I fix CVE-2023-45184?

To fix CVE-2023-45184, upgrade the IBM i Access Client Solutions to versions beyond 1.1.9.3.

Who is affected by CVE-2023-45184?