Security Bulletin: Multiple untrusted search path vulnerabilities in the IBM® Db2® DAS component on Windows (CVE-2018-1458).

Summary Multiple untrusted search path vulnerabilities in the Db2 Administration Server DAS component of Db2 on Windows could allow a local user to execute arbitrary code. Vulnerability Details CVEID: CVE-2018-1458 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server could...

CVE-2018-1458

CVE-2018-1458 affects IBM DB2 for Linux, UNIX and Windows (incl. DB2 Connect Server) versions 9.7, 10.1, 10.5 and 11.1 on Windows; vuln allows a local user to execute arbitrary code and perform DLL hijacking. Root cause: untrusted search path in the Db2 DAS component on Windows (local exploit). C...