Lucene search
China National Vulnerability DatabaseCNVD-2021-69951HistoryJun 25, 2021 - 12:00 a.m.
IBM DB2 Backlink Vulnerability
2021-06-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
0.0004 Low
EPSS
Percentile
5.1%
IBM DB2 is a relational database management system from the American company IBM. The system’s execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 for Linux, UNIX, and Windows (including DB2 Connect Server) has a backlink vulnerability that can be exploited by attackers to access and change the configuration of Db2.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm db2 for unix | eq | 11.5 | |
| ibm db2 for windows | eq | 11.5 | |
| ibm db2 for linux | eq | 11.5 |
Related
cvelist
cvelist
CVE-2020-4885
2021-06-23 00:00:00
ibm
ibm
Security Bulletin: IBM® Db2® could allow a local user to access and change the configuration of DB2 due to a race condition via a symbolic link. (CVE-2020-4885)
2021-06-29 04:08:08
cve
cve
CVE-2020-4885
2021-06-24 19:15:08
nvd
nvd
CVE-2020-4885
2021-06-24 19:15:08
prion
prion
Race condition
2021-06-24 19:15:00
nessus
nessus
IBM DB2 11.5 < 11.5.6 FP0 Multiple Vulnerabilities (UNIX)
2021-07-02 00:00:00