IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lead to code execution. IBM X-Force ID: 212953.

The version of AIX installed on the remote host is prior to APAR IJ36805. It is, therefore, affected by a vulnerability as referenced in the IJ36805 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36816. It is, therefore, affected by a vulnerability as referenced in the IJ36816 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36810. It is, therefore, affected by a vulnerability as referenced in the IJ36810 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36806. It is, therefore, affected by a vulnerability as referenced in the IJ36806 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ36815. It is, therefore, affected by a vulnerability as referenced in the IJ36815 advisory.

  - IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in     the lscore command which could lead to code execution. IBM X-Force ID: 212953. (CVE-2021-38991)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
156602	AIX (IJ36805)	Nessus	AIX Local Security Checks	high
156601	AIX (IJ36816)	Nessus	AIX Local Security Checks	high
156600	AIX (IJ36810)	Nessus	AIX Local Security Checks	high
156599	AIX (IJ36806)	Nessus	AIX Local Security Checks	high
156596	AIX (IJ36815)	Nessus	AIX Local Security Checks	high

Detections

Analytics

CVE-2021-38991

high

Tenable Plugins

high

high

high

high

high