Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM Predictive Maintenance and Quality

Summary

IBM DB2 is shipped with IBM Predictive Maintenance and Quality. Information about some security vulnerabilities affecting IBM DB2 have been published their respective security bulletins.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section.

Affected Products and Versions

IBM Predictive Maintenance and Quality 2.5.3 – 2.6.1

IBM IoT Predictive Maintenance and Optimization 1.0.0 – 1.0.1

Remediation/Fixes

Refer to the following security bulletins for vulnerability details and information about fixes addressed by IBM DB2 which is/are shipped with IBM Predictive Maintenance and Quality.

IBM® Db2® vulnerability allows local user to overwrite Db2 files. (CVE-2017-1452)

IBM® Db2® is affected by denial of service vulnerability in the Db2 Connect Server (CVE-2017-1519)_ _

IBM® Db2® is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT (CVE-2017-1520)