PT-2019-17139 · Ibm · Ibm Db2 High Performance Unload

Published 2019-12-12 · Updated 2024-03-11 · CVE-2019-4606

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM DB2 High Performance Unload load for LUW versions 6.1 through 6.5

Description The issue is caused by an untrusted search path vulnerability, allowing a local attacker to execute arbitrary code on the system. An attacker could exploit this by using an executable file to execute arbitrary code.

Recommendations For IBM DB2 High Performance Unload load for LUW versions 6.1 through 6.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2019-4606

Affected Products

Ibm Db2 High Performance Unload

References · 5

• https://osv.dev/vulnerability/CVE-2019-4606 · Vendor Advisory
• https://ibm.com/support/pages/node/1128063 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4606 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/168298 · Vendor Advisory
• https://twitter.com/Esparta6108713/status/1767207425638010888 · Twitter Post