IBM i HTTP Server Administration Web App RCE and Info Disclosure Flaw

The IBM i HTTP Server Administration web application contains an improper data sanitization vulnerability.

A remote authenticated attacker could exploit this flaw to obtain sensitive information or execute arbitrary code on the system.

Affected versions:

• IBM i 7.3
• IBM i 7.4
• IBM i 7.5
• IBM i 7.6