CVE-2018-1449

Опубликовано: 25 мая 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 3.6

EPSS Низкий

Описание

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140044.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22016181
Vendor Advisory
http://www.securitytracker.com/id/1041004
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/140044
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22016181
Vendor Advisory
http://www.securitytracker.com/id/1041004
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/140044
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00066

Низкий

5.5 Medium

CVSS3

3.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-mqw9-r5hh-fpjr