CVE-2017-1134 Privilege escalation in Tivoli System Automation for Multiplatforms

High 7.8 Published Updated

A local user can exploit IBM Reliable Scalable Cluster Technology to escalate privileges and gain root access on the system.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-2017-1134?

CVE-2017-1134 is a high-severity vulnerability in IBM Corporation Tivoli System Automation for Multiplatforms, published on 20 Mar 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM Reference #: 1998459.

Which versions are affected by CVE-2017-1134?

It affects 1 product.

Products include Ibm Power Hardware Management Console.

How do I fix CVE-2017-1134?

No fix has been published for CVE-2017-1134 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-1134 being exploited?

There is no known exploitation of CVE-2017-1134 in the wild and no public exploit code.

Sources

Also known as GHSA-98c8-m6rf-c5cw.

Is CVE-2017-1134 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free