2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:i:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:i:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:i:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:i:7.2.0:*:*:*:*:*:*:*"],"product":"i","vendor":"IBM","versions":[{"lessThanOrEqual":"2.3.0","status":"affected","version":"7.6.0","versionType":"semver"},{"status":"affected","version":"7.5.0"},{"status":"affected","version":"7.4.0"},{"status":"affected","version":"7.3.0"},{"status":"affected","version":"7.2.0"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:i:7.2:*:*:*:*:*:*:*","matchCriteriaId":"BD871157-2BB3-4641-B84E-3EA13D24D35A","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:*","matchCriteriaId":"9A49E8C5-7967-42AE-A787-C533D24A63D7","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:i:7.4:*:*:*:*:*:*:*","matchCriteriaId":"92D03306-B6C9-403E-99A2-CE9D8DC3B482","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:i:7.5:*:*:*:*:*:*:*","matchCriteriaId":"F7CCB5BF-08EF-472F-A663-5DE270234F10","vulnerable":true},{"criteria":"cpe:2.3:o:ibm:i:7.6:*:*:*:*:*:*:*","matchCriteriaId":"AFFF96C2-7E0F-4DF9-AF51-3EE357D51095","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check. A malicious actor could cause user-controlled code to run with administrator privilege."},{"lang":"es","value":"IBM i 7.6, 7.5, 7.4, 7.3 y 7.2 es vulnerable a la escalada de privilegios causada por una comprobación de autorización no válida de la GUI de administración web de IBM i. Un actor malicioso podría hacer que código controlado por el usuario se ejecute con privilegios de administrador."}],"id":"CVE-2026-2311","lastModified":"2026-10-26T21:10:00.170","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.5,"impactScore":5.9,"source":"psirt@us.ibm.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2311","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-05-01T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-04-30T22:16:25.147","references":[{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/7269560"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}
|