CVE-2025-2947: IBM i privilege escalation
IBM i 7.6
contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command. A malicious actor can use the command to elevate privileges to gain root access to the host operating system.
Other sources
IBM i contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command. A malicious actor can use the command to elevate privileges to gain root access to the host operating system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2947?
CVE-2025-2947 has a high severity rating due to its potential for privilege escalation.
How do I mitigate CVE-2025-2947?
To mitigate CVE-2025-2947, update your IBM i system to a version that addresses this vulnerability.
What software is affected by CVE-2025-2947?
CVE-2025-2947 affects IBM i version 7.6 and earlier.
Can CVE-2025-2947 be exploited remotely?
Yes, CVE-2025-2947 can be exploited remotely by a malicious actor if they have access to execute commands.
What type of vulnerability is CVE-2025-2947?
CVE-2025-2947 is classified as a privilege escalation vulnerability.