Threats affecting pkg:deb/ibm/i

IBM i versions 7.3 through 7.6 contain a missing authorization vulnerability in the Host-Based Printer Subsystem. This flaw allows a remote unauthenticated attacker to print files they should not have access to, potentially exposing sensitive information. The vulnerability does not allow modification or deletion of data but can lead to information disclosure. The CVSS score is 4.8, indicating a medium severity level.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they should be blocked by Navigator configuration. This could allow attackers to upload files onto the system to places the Navigator support did not intend, but only if the profile could already do that by itself.