Remote code execution

2023-04-2613:15:00

PRIOn knowledge base

www.prio-n.com

ibm

db2

remote code execution

vulnerability

database administrator

x-force id

nvd

7.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.5%

JSON

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance. IBM X-Force ID: 252011.

CPENameOperatorVersion
db2ge11.1
db2lt11.1.4
db2ge11.5
db2lt11.5.8
db2eq10.5 fp10
db2eq10.5 fp1
db2eq10.5 fp2
db2eq10.5 fp3
db2eq10.5 fp3a
db2eq10.5 fp4