CVE-2019-4536
CVE-2019-4536
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.7EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
29 Aug 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this vulnerability to obtain elevated privileges on the restored system. IBM X-Force ID: 165592.
CVSS:3.0/AV:L/I:H/S:U/UI:N/PR:N/C:H/AC:H/A:N/RL:O/RC:C/E:U
Affected products
IBM · i