description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014.
problem types: Gain Privileges
affected:
{
product: AIX
vendor: IBM
versions:
status: affected, version: 7.1
status: affected, version: 7.2
status: affected, version: 7.3
}
{
product: VIOS
vendor: IBM
versions:
status: affected, version: 3.1
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.4
baseSeverity: HIGH
confidentialityImpact: HIGH
exploitCodeMaturity: UNPROVEN
integrityImpact: HIGH
privilegesRequired: NONE
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 7.3
temporalSeverity: HIGH
userInteraction: NONE
vectorString: CVSS:3.0/A:H/C:H/I:H/AC:L/S:U/PR:N/UI:N/AV:L/RL:O/E:U/RC:C
version: 3.0
]