PT-2019-9296 · Ibm · Ibm Informix Dynamic Server Enterprise Edition

CVE-2018-1632 · Publicado 2019-08-20 · Atualizado 2023-02-24

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server Enterprise Edition version 12.1

Description A symbolic link vulnerability in .infxdirs could allow a local user logged in with database administrator privileges to gain root privileges.

Recommendations For IBM Informix Dynamic Server Enterprise Edition version 12.1, consider restricting access to the .infxdirs directory to prevent exploitation of the symbolic link vulnerability until a patch is available.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2018-1632

Produtos afetados

Ibm Informix Dynamic Server Enterprise Edition

Referências · 5

• https://security.netapp.com/advisory/ntap-20190903-0002 · Nota
• http://ibm.com/support/docview.wss?uid=ibm10964987 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1632 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1632 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/144432 · Aviso do Fabricante