Vulnerability Details CVE-2023-37410
IBM Personal Communications 14.05, 14.06, and 15.0.0 could allow a local user to escalate their privileges to the SYSTEM user due to overly permissive access controls. IBM X-Force ID: 260138.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 3.8%
CVSS Severity
CVSS v3 Score 8.4
References
Products affected by CVE-2023-37410
-
cpe:2.3:a:ibm:person_communications:14.0.5
-
cpe:2.3:a:ibm:person_communications:14.0.6
-
cpe:2.3:a:ibm:person_communications:15.0.0