CVE-2024-52895

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Feb 14, 2025
CWE ID 754

Summary

CVE-2024-52895 is a new vulnerability affecting IBM i 7.4 and 7.5 systems. This issue allows a privileged attacker to bypass database capabilities restriction checks, leading to a denial of service. By removing or impacting crucial database infrastructure files, the attacker can cause incorrect behavior in software products that depend on the database. This vulnerability poses a significant risk and requires immediate attention from IBM i users to apply the necessary patches or mitigations.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share