Description
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014.
CVSS breakdown
CVSS 3.0
Availability
High
Confidentiality
High
Integrity
High
Attack Complexity
Low
Scope
Unchanged
Privileges Required
None
User Interaction
None
Attack Vector
Local
RL
O
E
Unchanged
RC
Changed
Affected products
- ibm / aix7.1 – 7.1
- ibm / aix7.2 – 7.2
- ibm / aix7.3 – 7.3
- ibm / vios3.1 – 3.1