CVE-2024-47104: IBM I

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file security attributes without having object management rights to the physical file. A malicious actor can use the elevated privileges to perform actions restricted by their view privileges.

Affected products

• IBM I: version 7.4 only; version 7.5 only

Published 2024-12-18. Last modified 2026-06-17.