Vulnerability in Ibm I Access Client Solutions
CVE-2024-22318
IBM i Access Client Solutions (ACS) 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.4 is vulnerable to NT LAN Manager (NTLM) hash disclosure by an attacker modifying UNC capable paths within ACS configuration files to point to a hostile serv…
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.006 (44.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.1 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Ibm I Access Client Solutions — versions 1.1.2, 1.1.4.3
- Ibm I_access_client_solutions
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@us.ibm.com (vendor-advisory, Vendor Advisory)
- psirt@us.ibm.com (VDB Entry, vdb-entry)
- psirt@us.ibm.com (VDB Entry, Third Party Advisory)
- psirt@us.ibm.com (Mailing List, Third Party Advisory)
Frequently asked questions
- What is CVE-2024-22318?
- CVE-2024-22318 is a medium-severity vulnerability in Ibm I Access Client Solutions, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 5.1/10. Published 2024-02-09.
- How severe is CVE-2024-22318?
- Medium severity. CVSS v3 base score is 5.1 out of 10.
- Is CVE-2024-22318 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.