Описание
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128178.
Ссылки
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
Одно из
cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.9:a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:9.7.0.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.3:a:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:10.5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2:11.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:9.7.0.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:10.5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:db2_connect:11.1.0.0:*:*:*:*:*:*:*
Одно из
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 18%
0.00059
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner privileges to obtain root access. IBM X-Force ID: 128178.
fstec
около 9 лет назад
Уязвимость систем управления базами данных IBM DB2, IBM DB2 Connect (включая IBM DB2 Connect server), связанная с недостатками разграничения доступа, позволяющая нарушителю получить доступ к корневой папке
EPSS
Процентиль: 18%
0.00059
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
NVD-CWE-noinfo