IBM i Authentication and Authorization Vulnerability in IBM i Netserver

A vulnerability exists in IBM i versions 7.2, 7.3, 7.4, 7.5, and 7.6, allowing authentication and authorization attacks. This issue arises from improper validation in IBM i Netserver, which could enable a malicious actor to exploit brute force authentication methods or bypass authority restrictions to gain unauthorized access to the server.

Impact

Exploitation of this vulnerability could lead to unauthorized access on the server by bypassing authentication and authorization mechanisms.

Remediation

Users can apply a PTF to address this vulnerability. The specific PTF numbers for each IBM i release are available on the IBM Support website.