CVE-2024-35122

LOW EPSS 6.5%
Published Jan 24, 20251y ago · Modified Jun 17, 20261w ago
2.8 CVSS 3.1
Low
Find Similar
Published Jan 24, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to a file level local denial of service caused by an insufficient authority requirement. A local non-privileged user can configure a referential constraint with the privileges of a user socially engineered to access the target file.

CVSS Details

Base Score
2.8
Exploitability
1.3
Impact
1.4
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction Required
Scope Unchanged
Confidentiality None
Integrity None
Availability Low

Threat Intelligence

EPSS Exploit Probability
6.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-266

Affected Products 5

VendorProductVersionRange
ibmi7.2any
ibmi7.3any
ibmi7.4any
ibmi7.5any
ibmi*any

References 1

  • ibm.com https://www.ibm.com/support/pages/node/7178317
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.