CVE-2023-40377 (i)

Backup, Recovery, and Media Services (BRMS) for IBM i 7.2, 7.3, and 7.4 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host operating system. IBM X-Force ID: 263583.

access actor backup command command line cve elevate escalation host ibm ibm x-force local local privilege escalation malicious media operating system privilege privilege escalation privileges recovery services system vulnerability x-force