CVE-2019-4588

Опубликовано: 26 мая 2021

Источник: nvd

CVSS3: 7.4

CVSS3: 7.8

CVSS2: 4.4

EPSS Низкий

Описание

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/167365
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20210629-0004/
Third Party Advisory
https://www.ibm.com/support/pages/node/6456029
Mitigation
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/167365
VDB Entry
Vendor Advisory
https://security.netapp.com/advisory/ntap-20210629-0004/
Third Party Advisory
https://www.ibm.com/support/pages/node/6456029
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:10.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:db2:11.5:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00116

Низкий

7.4 High

CVSS3

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-427

Связанные уязвимости

GHSA-ch59-h425-mjj8

CVSS3: 7.8

github

больше 3 лет назад

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks.

EPSS

Процентиль: 31%

0.00116

Низкий

7.4 High

CVSS3

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-427