CVE-2020-4945

🗓️ 24 Jun 2021 18:45:26Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 68 Views

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite arbitrary files due to improper group permissions. IBM X-Force ID

Reporter	Title	Published	Views	Family All 26
IBM Security Bulletins	Security Bulletin: IBM® Db2® could allow an authenticated user to overwrite arbitrary files due to improper group permissions. (CVE-2020-4945)	29 Jun 202113:44	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM DB2 used by IBM Security Verify Governance, Identity Manager virtual appliance component	30 Mar 202217:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple IBM DB2 Server Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform	20 Sep 202105:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 supported by IBM Security Verify Governance	14 Apr 202213:25	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM DB2 used by IBM Security Verify Governance, Identity Manager software component	1 Mar 202221:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple IBM Db2 Server Vulnerabilities Affect IBM Emptoris Program Management	20 Sep 202105:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product.	18 Dec 202100:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM Db2 affect IBM Spectrum Protect Server (CVE-2021-29777, CVE-2021-20579, CVE-2021-29703, CVE-2020-4885, CVE-2020-4945)	10 Dec 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple IBM Db2 Server Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Mgmt	20 Sep 202105:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2021-20579, CVE-2020-4945, CVE-2021-29777, CVE-2020-4885, CVE-2021-29703)	11 Aug 202117:40	–	ibm

NVD

Vulners

Node

ibm db2Match11.5

AND

ibm aixMatch-

linux linux_kernelMatch-

[
  {
    "product": "DB2 for Linux and UNIX",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "11.5"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20210720-0006/
ibm	www.ibm.com/support/pages/node/6466367
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/191945

21 Nov 2024 05:33Current

7.6High risk

Vulners AI Score7.6

CVSS 25.5

CVSS 3.18.1

CVSS 36.5

EPSS0.00122

CWE-732