6.7
CVSSv3

CVE-2022-40746

Published: 21/11/2022 Updated: 07/11/2023
CVSS v3 Base Score: 6.7 | Impact Score: 5.9 | Exploitability Score: 0.8
VMScore: 0

Vulnerability Summary

IBM i Access Family 1.1.2 up to and including 1.1.4 and 1.1.4.3 up to and including 1.1.9.0 could allow a local authenticated malicious user to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236581.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm i_access_client_solutions