IBM AIX versions 7.2 and 7.3, along with IBM PowerVM VIOS 4.1, contain a path traversal vulnerability (CWE-22) in the nimesis registration service. This vulnerability allows a remote attacker to overwrite files by improperly limiting pathname access to restricted directories. The CVSS 3.1 base score is 8.2, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact. No vendor advisory or patch information is currently available.

A remote attacker can exploit this vulnerability to overwrite files on affected systems, potentially leading to integrity compromise. There is no impact on confidentiality, and availability impact is low. The flaw could allow unauthorized modification of system or application files, which may affect system behavior or security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, monitoring IBM's security advisories for updates is recommended. Avoid exposing the nimesis registration service to untrusted networks until a fix is available.