CVE-2024-27260 | THREATINT

Description

IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 283985.

Reserved 2024-02-22 | Published 2024-05-16 | Updated 2024-08-02 | Assigner ibm

HIGH: 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-250 Execution with Unnecessary Privileges

Product status

Default status

unaffected

7.2, 7.3, VIOS 3.1, VIOS 4.1

affected

References

www.ibm.com/support/pages/node/7152543 vendor-advisory

exchange.xforce.ibmcloud.com/vulnerabilities/283985 vdb-entry

cve.org (CVE-2024-27260)

nvd.nist.gov (CVE-2024-27260)

Download JSON