Privilege escalation via unauthorized physical file triggers

Privilege escalation in IBM-i 7.2 through 7.5 allows local users to execute code with another user’s privileges via a physical file trigger. Db2 for IBM-i permits a non-administrator to configure a physical file trigger that runs under the authority of a user who later accesses the target file. Exploitation requires local access and social engineering of that user, after which the trigger executes with the victim’s authority and can yield administrator privileges.