Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-882r-vmg6-cv26

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file.

The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file.

EPSS

Процентиль: 12%
0.0004
Низкий

Связанные уязвимости

nvd
больше 15 лет назад

The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file.

EPSS

Процентиль: 12%
0.0004
Низкий