CVE-2024-25050

HIGH

IBM Rational Developer for i and IBM i - Uncontrolled Search Path Element

Title source: llm
STIX 2.1

Description

IBM i 7.2, 7.3, 7.4, 7.5 and IBM Rational Development Studio for i 7.2, 7.3, 7.4, 7.5 networking and compiler infrastructure could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privileges. IBM X-Force ID: 283242.

References (3)

Core 3

Scores

CVSS v3 8.4
EPSS 0.0008
EPSS Percentile 23.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-427
Status published
Products (8)
ibm/i 7.2
ibm/i 7.3
ibm/i 7.4
ibm/i 7.5
ibm/rational_developer_for_i 7.2
ibm/rational_developer_for_i 7.3
ibm/rational_developer_for_i 7.4
ibm/rational_developer_for_i 7.5
Published Apr 28, 2024
Tracked Since Feb 18, 2026