CVE-2018-1487

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially…

High · published July 10, 2018

CVSS v3.0
8.4
EPSS
0%
Percentile
36.9
In the wild
Unconfirmed
What it is

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege users full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 140972.

The record
Technical detail
CVSS v3.0
8.4 · HIGH
Vector
CVSS:3.0/A:H/AC:L/AV:L/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00440 · 36.9th percentile
Published
2018-07-10T16:00Z
EPSS history
Timeline
  • 10 JUL 16:00Z
    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially…
    cvelistv5