8.4
High
CVE-2023-37410 IBM Personal Communications 14.05, 14.06, and 15.0.0 could allow a local user to escalate their privileges to the SYSTEM…
Description
IBM Personal Communications 14.05, 14.06, and 15.0.0 could allow a local user to escalate their privileges to the SYSTEM user due to overly permissive access controls. IBM X-Force ID: 260138.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Person Communications | Versions not published | |
| person_communications | 15.0.0 | No fix stated |
| person_communications 14.0 | 14.0.5 → 14.0.6 | No fix stated |