Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m9fq-5h8w-v8jr

Опубликовано: 28 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver do not verify supplied LDAP URL in Connect String. IBM X-Force ID: 249511.

IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver do not verify supplied LDAP URL in Connect String. IBM X-Force ID: 249511.

EPSS

Процентиль: 52%
0.00295
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 6.3
nvd
больше 2 лет назад

IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver do not verify supplied LDAP URL in Connect String. IBM X-Force ID: 249511.

EPSS

Процентиль: 52%
0.00295
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-94