CyberRota Analysis
AI-GeneratedA critical vulnerability exists in IBM Application Runtime Expert for i, allowing unauthenticated remote attackers to exploit the ARE GUI component and execute actions under another user's authenticated profile. This could lead to elevated privileges on the IBM i system, potentially compromising sensitive data and system integrity. Organizations using this software should prioritize patching to mitigate the risk of unauthorized access and privilege escalation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i could allow a remote attacker to gain elevated privileges, caused by ARE GUI component processing. An unauthenticated attacker can exploit this vulnerability to execute actions under another user's authenticated profile gaining elevated privileges on the IBM i system.