CVE-2024-51464

IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to remotely perform operations that the user is not allowed to perform when using Navigator for i.

Score

CVSS 3.1 4.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2024-12-21

Last modified

2025-11-03

Weaknesses

CWE-288

Affected products

• I (Ibm)

References

• https://www.ibm.com/support/pages/node/7179509
• http://seclists.org/fulldisclosure/2024/Dec/19
• http://seclists.org/fulldisclosure/2024/Dec/20