IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu command to obtain elevated privileges. IBM X-Force ID: 267964.

The version of AIX installed on the remote host is prior to APAR IJ48481. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ48481 advisory.

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     piodmgrsu command to obtain elevated privileges. IBM X-Force ID: 267964. (CVE-2023-45166)

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the     qdaemon command to escalate privileges or cause a denial of service. IBM X-Force ID: 267972.
    (CVE-2023-45174)

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     piobe command to escalate privileges or cause a denial of service. IBM X-Force ID: 267968.
    (CVE-2023-45170)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ48784. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ48784 advisory.

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     piodmgrsu command to obtain elevated privileges. IBM X-Force ID: 267964. (CVE-2023-45166)

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the     qdaemon command to escalate privileges or cause a denial of service. IBM X-Force ID: 267972.
    (CVE-2023-45174)

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     piobe command to escalate privileges or cause a denial of service. IBM X-Force ID: 267968.
    (CVE-2023-45170)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ48539. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ48539 advisory.

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     piodmgrsu command to obtain elevated privileges. IBM X-Force ID: 267964. (CVE-2023-45166)

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the     qdaemon command to escalate privileges or cause a denial of service. IBM X-Force ID: 267972.
    (CVE-2023-45174)

  - IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the     piobe command to escalate privileges or cause a denial of service. IBM X-Force ID: 267968.
    (CVE-2023-45170)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
187170	AIX : Multiple Vulnerabilities (IJ48481)	Nessus	AIX Local Security Checks	high
187169	AIX : Multiple Vulnerabilities (IJ48784)	Nessus	AIX Local Security Checks	high
187167	AIX : Multiple Vulnerabilities (IJ48539)	Nessus	AIX Local Security Checks	high

Detections

Analytics

CVE-2023-45166

high

Tenable Plugins

high

high

high