Описание
The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:a:ibm:informix_dynamic_server:11.70.xcn:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
EPSS
Процентиль: 11%
0.00038
Низкий
7.8 High
CVSS3
6.9 Medium
CVSS2
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly restrict access to the (1) nsrd, (2) nsrexecd, and (3) portmap executable files, which allows local users to gain privileges via a Trojan horse file.
EPSS
Процентиль: 11%
0.00038
Низкий
7.8 High
CVSS3
6.9 Medium
CVSS2
Дефекты
CWE-284