CVE-2024-22318mediumCWE-327

CVE-2024-22318: falha de média gravidade em IBM i Access Client Solutions

IBM i Access Client Solutions information disclosure

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar i Access Client Solutions

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 5.1epss 0.6%
da publicação à arma17 dias
Publicada no NVD9 de fev.
1ª PoC+17d
IBM i Access Client Solutions (ACS) 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.4 is vulnerable to NT LAN Manager (NTLM) hash disclosure by an attacker modifying UNC capable paths within ACS configuration files to point to a hostile server. If NTLM is enabled, the Windows operating system will try to authenticate using the current user's session. The hostile server could capture the NTLM hash information to obtain the user's credentials. IBM X-Force ID: 279091.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
IBM · i Access Client Solutions
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — IBM i Access Client Solutions

No mesmo produto, das mais perigosas para as menos.

CVE-2023-45184MEDIUMIBM i Access Client SolutionsEPSS 1.6%CVE-2023-45185HIGHIBM i Access Client Solutions code executionEPSS 1.0%CVE-2023-45182HIGHIBM i Access Client Solutions information disclosureEPSS 0.6%CVE-2026-13105HIGHIBM i Access Client Solutions (ACS) is Affected By Multiple VulnerabilitiesEPSS 0.5%CVE-2026-16695HIGHIBM i Access Client Solutions (ACS) is Affected By Multiple VulnerabilitiesEPSS 0.2%CVE-2026-13094HIGHIBM i Access Client Solutions (ACS) is Affected By Multiple VulnerabilitiesEPSS 0.2%