IXP CLI — Linux Identity Spoofing Vulnerability
Article ID: 447160
Updated On:
Products
Issue/Introduction
A security vulnerability has been identified within the iXp CLI tool on Linux platforms where an unprivileged local user can spoof their identity to escalate privileges or act as another user.
Problem Tracking Number: 29148
Environment
Workload Automation iXp Versions prior to 11.4.0.157
Linux / UNIX environments utilizing the iXp Command Line Interface (CLI)
Resolution
A formal fix has been developed to address this security flaw by ensuring the iXp CLI securely validates system identities and blocks unauthorized LD_PRELOAD environment overrides during initialization.
Fixing Release: iXp 11.4.0.157
Solution ID: 99112756
Release Date: 04 June 2026
Patch Availability:
As this solution is currently packaged as an interim maintenance patch and is not yet integrated into a widely published public cumulative release, it must be explicitly requested. To obtain the installation package for Solution 99112756, log in to the Broadcom Case Management Portal and reference the Solution ID or Problem Number 29148 in your request.
Additional Information
To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on the respective region.
Feedback
