CVE-2002-1731

IBM AS/400 - Info Disclosure

Title source: llm
STIX 2.1

Description

The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.

Exploits (1)

exploitdb WRITEUP VERIFIED
by ken@FTU · textlocalmultiple
https://www.exploit-db.com/exploits/21283

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/8179
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4059
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1003507

Scores

EPSS 0.0171
EPSS Percentile 82.5%

Details

Status published
Products (5)
ibm/os_400 v4r2
ibm/os_400 v4r3
ibm/os_400 v4r4
ibm/os_400 v4r5
ibm/os_400 v5r1
Published Dec 31, 2002
Tracked Since Feb 18, 2026