PT-2019-16995 · Ibm · Ibm Informix Dynamic Server Enterprise Edition

CVE-2019-4253 · Publicado 2019-08-20 · Atualizado 2023-02-24

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/A:H/I:H/C:H/PR:L/S:U/UI:N/AC:L

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server Enterprise Edition version 12.1

Description The issue allows a local privileged Informix user to load a malicious shared library, potentially gaining root access privileges.

Recommendations For IBM Informix Dynamic Server Enterprise Edition version 12.1, consider restricting access to loading shared libraries to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2019-4253

Produtos afetados

Ibm Informix Dynamic Server Enterprise Edition

Referências · 5

• https://osv.dev/vulnerability/CVE-2019-4253 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/159941 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4253 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=ibm10964987 · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20190903-0002 · Nota