i Access Client Solutions vulnerabilities
8 known vulnerabilities in i Access Client Solutions from IBM. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
i Access Client Solutions: Untrusted Search Path
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory.
- 7.8 High severity
i Access Client Solutions: Improper Neutralization of Special Elements used in an OS Command
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
- 7.1 High severity
i Access Client Solutions: Use of Hard-coded Credentials
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.
- 9.6 Critical severity
i Access Client Solutions: Download of Code Without Integrity Check
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation.
- 7.8 High severity
i Access Client Solutions: Improper Control of Generation of Code
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.
- 8.8 High severity
i Access Family: Improper Neutralization of Special Elements in Output Used by a Downstream Component
IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator.
- 8.8 High severity
i Access Client Solutions: Incorrect Authorization
IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IBM X-Force ID: 268273.
- 7.5 High severity
i Access Client Solutions: Insecure Storage of Sensitive Information
IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryption key due to improper authority checks. IBM X-Force ID: 268270.