PT-2017-2969 · Ibm · Ibm Db2+1

Rich Mirch · Publicado 2017-09-07 · Atualizado 2019-10-03 · CVE-2017-1439

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1

Description The issue is related to insufficient access control in the IBM DB2 database management system and the IBM DB2 Connect Server, which could allow a local user with DB2 instance owner privileges to obtain root access.

Recommendations For IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2017-02294

CVE-2017-1439

Produtos afetados

Ibm Db2

Ibm Db2 Connect Server

Referências · 7

• https://bdu.fstec.ru/vul/2017-02294 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg22006061 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1439 · Nota de Segurança
• http://securitytracker.com/id/1039301 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128058 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-1439 · Aviso do Fabricante
• http://securityfocus.com/bid/100690 · Nota