CVE-2024-27275

IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability caused by an insufficient authority requirement. A local user without administrator privilege can configure a physical file trigger to execute with the privileges of a user socially engineered to access the target file. The correction is to require administrator privilege to configure trigger support.

CVSS base score
7.4 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-266, CWE-287
Last modified
November 3, 2026
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

ibm i

References

View full NVD advisory →

More ibm vulnerabilities

← Back to CVE watch