CVE-2018-1448

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a local user to overwrite…

High · published March 22, 2018

CVSS v3.0
7.7
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140043.

The record
Technical detail
CVSS v3.0
7.7 · HIGH
Vector
CVSS:3.0/A:H/AC:L/AV:L/C:N/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.2th percentile
Published
2018-03-22T12:00Z
EPSS history
Timeline
  • 22 MAR 12:00Z
    IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability that could allow a local user to overwrite…
    cvelistv5