Unauthenticated RCE Vulnerability in IBM i Management Central Affecting V7R4 and Earlier
cybersecurityvulnerabilityremote_code_executionIBM_iunauthenticated_accessprivilege_escalation
The post describes an unauthenticated remote code execution (RCE) vulnerability in IBM i systems running Management Central on port 5555. The flaw allows attackers to exploit a client-controlled 'verify' flag without requiring credentials. This vulnerability affects IBM i versions 7.4 and earlier. The issue enables execution of commands with QSECOFR (highest privilege) access.