medium4.3Public exploit code
CVE-2024-51464
IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBMi Navigator 7.5 - HTTP Security Token Bypass2025-04-15 · webapps · multiple
Impact
IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to remotely perform operations that the user is not allowed to perform when using Navigator for i.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | I | Versions 7.3, 7.4, 7.5 |