Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xjj7-5xwp-h6p7

Опубликовано: 10 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.4

Описание

IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in the path of the affected service. IBM X-Force ID: 249194.

IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in the path of the affected service. IBM X-Force ID: 249194.

EPSS

Процентиль: 8%
0.00029
Низкий

8.4 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 8.4
nvd
больше 2 лет назад

IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in the path of the affected service. IBM X-Force ID: 249194.

EPSS

Процентиль: 8%
0.00029
Низкий

8.4 High

CVSS3

Дефекты

CWE-269