IBM i Privilege Escalation Vulnerability in OS Command

A privilege escalation vulnerability has been identified in IBM i version 7.6. The issue arises from incorrect profile swapping in an operating system command, allowing a malicious actor to elevate privileges and gain root access to the host.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling a user to gain root access on the system.

Remediation

Users can apply the PTF number SJ04908 to address this vulnerability. This PTF is available through the IBM i Fix Central.