IBM DB2 Information Disclosure Vulnerability

🗓️ 19 Sep 2018 00:00:00Reported by China National Vulnerability DatabaseType

A local attacker can exploit the db2cacpy vulnerability in IBM DB2 to read files on Linux, UNIX, and Windows.

Reporter	Title	Published	Views	Family All 11
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2018-1710, CVE-2018-1685, CVE-2018-1711)	1 Nov 201821:20	–	ibm
IBM Security Bulletins	Security Bulletin: Privilege escalation in IBM® Db2® tool db2cacpy (CVE-2018-1685).	6 Mar 202018:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product	6 Dec 201800:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Db2 vulnerabilities affect the IBM Spectrum Protect Server (CVE-2018-1685, CVE-2018-1710, CVE-2018-1711, CVE-2018-1780, CVE-2018-1781, CVE-2018-1799, CVE-2018-1802, CVE-2018-1834, CVE-2018-1857, CVE-2018-1897)	28 Jun 201922:05	–	ibm
Circl	CVE-2018-1685	30 Jan 202113:01	–	circl
CVE	CVE-2018-1685	21 Sep 201813:00	–	cve
Cvelist	CVE-2018-1685	21 Sep 201813:00	–	cvelist
EUVD	EUVD-2018-12264	7 Oct 202500:30	–	euvd
NVD	CVE-2018-1685	21 Sep 201813:29	–	nvd
OSV	CVE-2018-1685	21 Sep 201813:29	–	osv