IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information from the Host-Based Printer Subsystem due to no authorization check. A bad actor could use this vulnerability to print files they should not be able to access.
When using Access Client Solutions (ACS) to create Telnet printer sessions, version 1.1.9.15 or later must be installed for interoperability after applying the Host-Based Printer Subsystem PTFs. Failure to update to a compatible ACS application version will result in being unable to connect via telnet for printing. The current version of the ACS application can be viewed by clicking the 'About' link under the 'Help' tab in ACS.
View each PTF's cover letter for the additional actions required prior to installation.
IBM i Release5770-SS1
PTF Number(s)PTF Download Link(s)7.6SJ11502 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11502 7.5SJ11523 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11523 7.4SJ11524 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11524 7.3SJ11522 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11522
IBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.