CVE-2018-1383 A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system, to obtain root access on another machine. IBM X-force ID: 1...
CriticalCVSS 9.1
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system, to obtain root access on another machine. IBM X-force ID: 138117.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm aix | = 6.1 | No fix listed |
| ibm aix | = 6.1.1 | No fix listed |
| ibm aix | = 6.1.2 | No fix listed |
| ibm aix | = 6.1.3 | No fix listed |
| ibm aix | = 6.1.4 | No fix listed |
| ibm aix | = 6.1.5 | No fix listed |
| ibm aix | = 6.1.6 | No fix listed |
| ibm aix | = 6.1.7 | No fix listed |
| ibm aix | = 6.1.8 | No fix listed |
| ibm aix | = 6.1.9 | No fix listed |
| ibm aix | = 7.1 | No fix listed |
| ibm aix | = 7.1.1 | No fix listed |
| ibm aix | = 7.1.2 | No fix listed |
| ibm aix | = 7.1.3 | No fix listed |
| ibm aix | = 7.1.4 | No fix listed |
| ibm aix | = 7.1.5 | No fix listed |
| ibm aix | = 7.2 | No fix listed |
| ibm aix | = 7.2.1 | No fix listed |
| ibm aix | = 7.2.2 | No fix listed |
References
- aix.software.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- 102989 third-party-advisory vdb-entry
- 1040358 third-party-advisory vdb-entry
- ibm-aix-cve20181383-gain-access(138117) vdb-entry vendor-advisory