IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.ibm.com/support/pages/node/7292423 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 4
- Cpes+4 CPE criteria (now 4)NVD modified 2026-10-23 16:03
- StatusUndergoing Analysis → AnalyzedNVD modified 2026-10-23 16:03
- CVSS5.4 (v3.1, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) → 3.3 (v3.1, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)NVD modified 2026-10-23 16:03
- First seenCVSS 5.4NVD modified 2026-10-16 22:17
Affected (CPE criteria) 4
cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*
References 1
- https://www.ibm.com/support/pages/node/7292423 Vendor Advisory