CVE-2024-47104

IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file. A user with authority to a view can alter the based-on physical file security attributes without having object management rights to the physical file. A malicious actor can use the elevated privileges to perform actions restricted by their view privileges.

• CWE-732

• https://www.ibm.com/support/pages/node/7179158Vendor Advisory

Published

Dec 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47096Cross Site Scripting vulnerability in Follet School Solution…5.1
• CVE-2024-47097Cross Site Scripting vulnerability in Follet School Solution…5.1
• CVE-2024-4710The UberMenu plugin for WordPress is vulnerable to Stored Cr…6.4
• CVE-2024-47100A vulnerability has been identified in SIMATIC S7-1200 CPU 1…7.2
• CVE-2024-47102IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privi…5.5
• CVE-2024-47103IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.…5.4
• CVE-2024-47106IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could…7.5
• CVE-2024-47107IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scrip…5.4
• CVE-2024-47109IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.…5.3
• CVE-2024-4711The WordPress Infinite Scroll – Ajax Load More plugin for Wo…5.4
• CVE-2024-47113IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5,…9.1
• CVE-2024-47115IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local us…7.8