PT-2019-17139 · Ibm · Ibm Db2 High Performance Unload

CVE-2019-4606 · Publicado 2019-12-12 · Atualizado 2024-03-11

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM DB2 High Performance Unload load for LUW versions 6.1 through 6.5

Description The issue is caused by an untrusted search path vulnerability, allowing a local attacker to execute arbitrary code on the system. An attacker could exploit this by using an executable file to execute arbitrary code.

Recommendations For IBM DB2 High Performance Unload load for LUW versions 6.1 through 6.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2019-4606

Produtos afetados

Ibm Db2 High Performance Unload

Referências · 5

• https://osv.dev/vulnerability/CVE-2019-4606 · Aviso do Fabricante
• https://ibm.com/support/pages/node/1128063 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4606 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/168298 · Aviso do Fabricante
• https://twitter.com/Esparta6108713/status/1767207425638010888 · Publicação no Twitter