PT-2012-4650 · Ibm · Ibm Db2+1

Publicado 2012-09-25 · Atualizado 2017-08-29 · CVE-2012-3324

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 and DB2 Connect version 10.1 before FP1

Description A directory traversal issue exists in the UTL FILE module, allowing remote authenticated users to access arbitrary files by manipulating the pathname in the file field. This could lead to modification, deletion, or reading of files outside the intended directory.

Recommendations For IBM DB2 and DB2 Connect version 10.1 before FP1, apply Fix Pack 1 to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2012-3324

Produtos afetados

Db2 Connect

Ibm Db2

Referências · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21611040 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC85513 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-3324 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77924 · Nota