This vulnerability involves improper limitation of a pathname to a restricted directory (CWE-22) in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. Due to this flaw, a remote attacker could bypass security restrictions by exploiting path traversal, potentially accessing files or directories outside the intended restricted scope. The CVSS 3.1 vector indicates the attack requires network access with high attack complexity, no privileges, and no user interaction, impacting confidentiality and integrity with no availability impact.

The vulnerability allows remote attackers to bypass security restrictions, potentially leading to unauthorized access to files or directories outside the intended restricted areas. The impact affects confidentiality and integrity but does not affect system availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented in the provided data. Users should monitor IBM advisories for updates and apply patches or mitigations once available.