Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f79w-jppj-65wv

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege users full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 140972.

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege users full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 140972.

EPSS

Процентиль: 23%
0.00077
Низкий

7.8 High

CVSS3

Дефекты

CWE-426

Связанные уязвимости

CVSS3: 8.4
nvd
больше 7 лет назад

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege users full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 140972.

EPSS

Процентиль: 23%
0.00077
Низкий

7.8 High

CVSS3

Дефекты

CWE-426