CVE-2023-45182: IBM I Access Client Solutions

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 is vulnerable to having its key for an encrypted password decoded. By somehow gaining access to the encrypted password, a local attacker could exploit this vulnerability to obtain the password to other systems. IBM X-Force ID: 268265.

Affected products

• IBM I Access Client Solutions: from 1.1.2, up to and including 1.1.4; from 1.1.4.3, before 1.1.9.4 (fixed in 1.1.9.4)

Published 2023-12-14. Last modified 2026-06-17.