CVE-2022-41290 - IBM AIX privilege escalation

Back Back to CVE browser

HIGH

IBM AIX privilege escalation

Published Dec 23, 2022

8.4

HIGH

CVSS 3.1

EPSS 0.19%

Description

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the rm_rlcache_file command to obtain root privileges. IBM X-Force ID: 236690.

Affected products

Vendor IBM Product AIX Default
unaffected
- Version
  7.1, 7.2, 7.3, VIOS 3.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

AIX

unaffected

Version	Status	Constraints
7.1, 7.2, 7.3, VIOS 3.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-250

Execution with Unnecessary Privileges

CWE-269

Improper Privilege Management

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/236690
vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6847917
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/236690		vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6847917		vendor-advisoryPatchVendor Advisory