PT-2017-13893 · Ibm · Ibm Db2

Publicado 2017-09-12 · Atualizado 2017-09-15 · CVE-2017-1520

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7, 10.1, 10.5, and 11.1

Description The issue allows an unauthorized command to activate the database when the authentication type is set to CLIENT.

Recommendations For IBM DB2 version 9.7, update to a version that includes a fix for this issue. For IBM DB2 version 10.1, update to a version that includes a fix for this issue. For IBM DB2 version 10.5, update to a version that includes a fix for this issue. For IBM DB2 version 11.1, update to a version that includes a fix for this issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-1520

Produtos afetados

Ibm Db2

Referências · 6

• https://osv.dev/vulnerability/CVE-2017-1520 · Aviso do Fabricante
• http://securityfocus.com/bid/100684 · Nota
• http://securitytracker.com/id/1039308 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1520 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/129830 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg22007186 · Aviso do Fabricante