Security Advisory

CVE-2019-4536

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-08-29 15:00:16
Last updated 2024-09-16 16:33:45
Assigner ibm
CVSS score 6.7
State PUBLISHED

Description

IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this vulnerability to obtain elevated privileges on the restored system. IBM X-Force ID: 165592.