WID-SEC-W-2023-2240

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM AIX: Mehrere Schwachstellen

view advisory published 2023-08-30

Ein lokaler Angreifer kann mehrere Schwachstellen in IBM AIX und IBM VIOS ausnutzen, um Informationen offenzulegen oder um beliebigen Code auszuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-40371USmedium5.5OT elevated—
IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force I…
CVE-2023-38408UScritical9.8Exploit
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-con…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan