← Vulnerability feed

Vulnerability record · CVE-2023-45185 · published 14 December 2023

CVE-2023-45185: Ibm i access client solutions incorrect authorization vulnerability

Ibm · I Access Client Solutions

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IBM X-Force ID: 268273.

8.8 CVSS 3.1 High EPSS 0.99% · top 39.0% CWE-863 · Incorrect authorization
8.8CVSS 3.1 base score
0.99%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IBM X-Force ID: 268273.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://exchange.xforce.ibmcloud.com/vulnerabilities/268273 VDB Entry
https://www.ibm.com/support/pages/node/7091942 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/268273 VDB Entry
https://www.ibm.com/support/pages/node/7091942 Vendor Advisory

Track CVE-2023-45185 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.6CVE-2026-13433Ibm i access client solutions download of code without integrity check vulnerabilityIBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an I…EPSS 0.17%8.8CVE-2026-13105Ibm i access client solutions path traversal vulnerabilityIBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration.EPSS 0.50%8.8CVE-2026-7770Ibm i access client solutions injection vulnerabilityIBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for…EPSS 0.81%7.8CVE-2026-14875Ibm i access client solutions untrusted search path vulnerabilityIBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publi…EPSS 0.17%7.8CVE-2026-16695Ibm i access client solutions os command injection vulnerabilityIBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of speci…EPSS 0.21%7.8CVE-2026-13094Ibm i access client solutions code injection vulnerabilityIBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publi…EPSS 0.20%7.5CVE-2023-45184Ibm i access client solutions vulnerabilityIBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryption key due to improper auth…EPSS 1.6%7.1CVE-2026-14866Ibm i access client solutions hard-coded credentials vulnerabilityIBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.EPSS 0.11%

Source: NIST National Vulnerability Database (record CVE-2023-45185), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.