CVE Catalog
CVE-2023-40371
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk0.12%
2th percentile - higher than 2% of all known CVEs
Summary
The OpenSSH implementation in IBM AIX 7.2, 7.3, and VIOS 3.1 may allow a non-privileged local user to access files that should be restricted due to improper access controls.
Risk Assessment
The risk associated with this vulnerability is the potential for unauthorized access to sensitive data by local users, which could lead to breaches of information confidentiality.
Recommendation
It is recommended to update the system to the latest version to patch this vulnerability and to review and strengthen file access controls.
Original NVD description (English source)
IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476.