PT-2019-9298 · Ibm · Ibm Informix Dynamic Server Enterprise Edition

CVE-2018-1634 · Publicado 2019-08-20 · Atualizado 2023-02-24

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server Enterprise Edition version 12.1

Description A symbolic link vulnerability exists in infos.DBSERVERNAME, which could allow a local user logged in with database administrator privileges to gain root privileges.

Recommendations For IBM Informix Dynamic Server Enterprise Edition version 12.1, consider restricting access to the infos.DBSERVERNAME to minimize the risk of exploitation until a patch is available.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2018-1634

Produtos afetados

Ibm Informix Dynamic Server Enterprise Edition

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-1634 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1634 · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20190903-0002 · Nota
• http://ibm.com/support/docview.wss?uid=ibm10964987 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/144437 · Aviso do Fabricante