VULNERABILITY INTELLIGENCE

CVE-2024-27273

CVSS score8.1 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-05-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead to privilege escalation. IBM X-Force ID: 284903.

Weakness classification

  • CWE-266: Incorrect Privilege Assignment

Primary references