7.8Alta
CVE-2026-84414IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []
Descripción
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path.
Debilidad (CWE):
CWE-732
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://www.ibm.com/support/pages/node/7289443 vendor-advisorypatchVendor Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:o:ibm:i:*:*:*:*:*:*:*:*≥ 7.3 ≤ 7.6