title: IBM i Access Client Solutions code execution
description: IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code.  Due to improper authority checks the attacker could perform operations on the PC under the user's authority.  IBM X-Force ID:  268273.
problem types: CWE-502 Deserialization of Untrusted Data
affected:
{
defaultStatus: unaffected
product: i Access Client Solutions
vendor: IBM
versions:
lessThanOrEqual: 1.1.4, status: affected, version: 1.1.2, versionType: semver
lessThanOrEqual: 1.1.9.3, status: affected, version: 1.1.4.3, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL